| CARVIEW |
Linux?J?[?l????15?N?????????Ǝ㐫????????@?U??????????97???F??ʃ??[?U?[??????root??D??
Linux?J?[?l????2011?N???瑶?݂??Ă????Ǝ㐫?????炩?ɂȂ????B???ʂȌ?????K?v?Ƃ????A??ʃ??[?U?[???????猠?????i??R???e?i?E?o?ɂȂ???\????????Ƃ????BGoogle??kernelCTF?ł??????]?????ꂽ?U???́A?ǂ̂悤?Ȏd?g?݂Ő???????̂??B
???̋L???͉??????ł??B????o?^?i?????j????ƑS?Ă????????????܂??B
?@Nebula Security??2026?N7??7???i???n???ԁj?A?uLinux?J?[?l???v?̐Ǝ?i???????Ⴍ?j???uGhostLock?v?iCVE-2026-43499?j?Ɋւ???Z?p????????J?????B
?@?????҂?VEGA?œ??Ђɂ??ƁA???̐Ǝ㐫??2011?N?ȍ~?A?????̎?vLinux?f?B?X?g???r???[?V?????ɉe?????Ă????Ƃ????B??ʃ??[?U?[?????????ōU?????J?n?ł??A???ʂȃJ?[?l???ݒ??K?v?Ƃ??Ȃ??_?????????BNebula Security?́A???̐Ǝ㐫?????p????97???̐??????Ō??????i????уR???e?i?E?o????????????R?[?h???J?????AGoogle?́ukernelCTF?v????9??2337?h???̕?????????B
rtmutex?̌?Еt???????ɐ???ł????v??̌???
?@GhostLock?́A??????̃??[?J???U???҂??J?[?l???X?^?b?N?Ƀ_???O?????O?|?C???^?????o???A????I?Ȃ???C?ӂ̃A?h???X?ɏ??????݂????s?ł???悤?ɂ???Ǝ㐫???B????𑫊|????Ƃ??Ċ??e?[?u?????????????A?ŏI?I?ɃJ?[?l???̐???t???[??D??ł???B
?@???̐Ǝ㐫??Linux?J?[?l??2.6.39?œ???????ALinux?J?[?l??7.1?ŏC?????ꂽ?B?e??????̂?v2.6.39-rc1????v7.1-rc1?܂ł̃J?[?l???ŁA?K?v??????CONFIG_FUTEX_PI=y???L???ɂȂ??Ă??邱?Ƃ݂̂??B???[?U?[???O??Ԃ???ʂȃP?C?p?r???e?B?͕s?v?ŁA?e????????ł́A?f?B?X?g???r???[?V??????????C???ŃJ?[?l???ւ̍X?V???????????B
?@?????́ALinux?J?[?l???̃??A???^?C???~???[?e?b?N?X?irtmutex?j?̑ҋ@?????ɂ??????Еt???̕s?????ɂ???B
?@rtmutex?ŗ??p?????remove_waiter()?́A?{???A?ҋ@???Ă???X???b?h???g????Еt???????{???邱?Ƃ?O??Ƃ??Đv????Ă???B???̂??߁Acurrent->pi_blocked_on???N???A???鏈???͒ʏ?̒ᑬ?p?X?ł͐????????삷??B
?@????ARequeue-PI?ł͎???قȂ?Brt_mutex_start_proxy_lock()?͕ʃX???b?h?̂??߂?rt_mutex_waiter??o?^???邪?A?G???[???ɂ͊????߂????????K?v?ɂȂ?B???̌o?H?ł?current?͎??ۂ̑ҋ@?X???b?h?ł͂Ȃ??AFUTEX_CMP_REQUEUE_PI?s?????X???b?h???w???Ă???B
?@???́A__rt_mutex_start_proxy_lock()??-EDEADLK??Ԃ????ꍇ?̊????߂??????Ŕ???????Bremove_waiter()??waiter?ł͂Ȃ?current??pi_blocked_on??????NULL?ɖ߂????߁A?{???N???A?????ׂ??ҋ@?X???b?h???ɂ͌Â?rt_mutex_waiter?ւ̃|?C???^???c???Ă??܂??B
?@waiter?I?u?W?F?N?g??FUTEX_WAIT_REQUEUE_PI?őҋ@???Ă???X???b?h?̃J?[?l???X?^?b?N?ɑ??݂??邽?߁A?ҋ@?X???b?h?????[?U?[??Ԃɕ??A????ƁA???̃X?^?b?N?̈?͉???ς݂ƂȂ?B????ɂ???????炸?A?㑱??PI?`?F?[???T???ł͉???ς݃??????ւ̃|?C???^???Q?Ƃ??????邽?߁A?_???O?????O?|?C???^??????????B
?_???O?????O?|?C???^????root?????擾?܂?
?@?U???ł?3??futex??3?̃X???b?h?𗘗p????PI?ˑ??W?̏z???Ӑ}?I?ɍ??o???B?ҋ@?X???b?h??PI futex?ł???f_pi_chain???擾??????A?ʏ??futex?ł???f_wait????f_pi_target?ɍăL???[?????B???L?҃X???b?h??f_pi_target??ێ???????Ԃ?f_pi_chain?̉????ҋ@???A???C???X???b?h??FUTEX_CMP_REQUEUE_PI?????s????Əz?ˑ???????????B???̌??ʁAPI?`?F?[???T????-EDEADLK??Ԃ??A???̂??銪???߂??????????s?????B
?@???̌?A?ҋ@?X???b?h?͉???ς݂?rt_mutex_waiter???w?????܂܃??[?U?[??Ԃɖ߂?B?U???҂?sched_setattr()?Ȃǂ𗘗p????PI?`?F?[???T????C?ӂ̃^?C?~???O?ōĎ??s?????邱?ƂŁA???̃_???O?????O?|?C???^?????p?ł???B
?@Nebula Security?́A????ς݂ƂȂ????J?[?l???X?^?b?N?̈???ė??p???邽?߁A?ҋ@?X???b?h???g??prctl(PR_SET_MM, PR_SET_MM_MAP, ...)?????s???????@???̗p?????Bprctl_set_mm_map()?ł̓??[?U?[???w?肵??auxv???Œ?T?C?Y?̃X?^?b?N?o?b?t?@?[?ɃR?s?[????邽?߁A???̓??e?𗘗p???ċU??rt_mutex_waiter??z?u?ł???B
?@???̋U?I?u?W?F?N?g?ɂ????rtmutex??rb-tree?폜?????????p???A????I?ȔC?ӃA?h???X???????ݔ\?͂??l??????BNebula Security?́A???̏????????ΏۂƂ???inet6_protos[IPPROTO_UDP]??I???????B
?@????ɁAprefetch???߂̃^?C?~???O???𗘗p????KASLR?x?[?X??physmap?x?[?X??R????????????ACPU Entry Area?iCEA?j??direct-map?G?C???A?X??ɋU?̃I?u?W?F?N?g??ROP?X?^?b?N??z?u????Binet6_protos[IPPROTO_UDP]??????????????Ԃ?IPv6 UDP?p?P?b?g?𑗐M????ƁA?J?[?l???͍U???҂??p?ӂ????U??handler?????s???A????t???[???D????B
?@?ŏI?I?ɂ́uDirtyMode?v?ƌĂ???@?𗘗p????core_pattern sysctl?̃A?N?Z?X????????????????B????ɂ??A?ʏ?͊Ǘ??҂????ύX?ł??Ȃ?/proc/sys/kernel/core_pattern?????????[?U?[?ł??ҏW?\?ƂȂ?A?N???b?V?????ɔC?ӂ̃v???O??????root?????Ŏ??s?????邱?ƂŌ??????i??????????B
?@Nebula Security??2026?N4??18????security@kernel.org?ɐƎ㐫????A?p?b?`?Ă??o?????B???̌?A???N4??20???ɕʃp?b?`?ŏC??????荞?܂?A???N5??4???ɂ͏C???ł??e?u?????`?փo?b?N?|?[?g???ꂽ?BGoogle?͓??N6??30????kernelCTF?ւ̓??e?????F???ANebula Security?͓??N7??7???ɋZ?p????????J?????B
?@?e????????ł́A?eLinux?f?B?X?g???r???[?V??????????C???ŃJ?[?l???ւ̍X?V?𑬂₩?ɓK?p???邱?Ƃ??]?܂??B
?֘A?L??
???p??????99???ALinux?J?[?l???ɐV?[???f?C?uBad Epoll?v????????
???????͖?99???BLinux?J?[?l???Ō????????V???Ȍ??????i?̐Ǝ㐫?́A?ɂ߂ĒZ???????^?C?~???O?ɂ???????炸?A?????m????root??????D???邱?Ƃ??????ꂽ?B????ɁA???̐Ǝ㐫??Android?ɂ??e??????\????????Ƃ????B
KDDI???[???R?????̑S?e?????@?[???f?C???p??761???l???p?X???[?h?????o
6???Ɍ??\???ꂽKDDI??ISP???ƎҌ??????[????Ղւ̕s???A?N?Z?X?ŁA?V???Ȓ??????ʂ????炩?ɂȂ????B?R?????????̂̓??[???A?h???X1223??3087?l?????B???̂???761??6173?l???ł̓p?X???[?h???R???????m?F???ꂽ?Ƃ????B???Ђ̍Ĕ??h?~??Ƃ́B
?u?????T???E?F?A?v?N???菇??O?????@?????m???????Ԃ肩??͑??Ƃ??悤
?g?????T???E?F?A?h?ƕ????ƁA??????ˑR?f?[?^???Í????????Ǝv?????????B???????U???҂́A???̂͂邩?O????Â??ɐN?????A?Г??????A?d?v?f?[?^??T???o???Ă???B?D?_?̔ƍs?ɂȂ??炦?Ȃ???A?????T???E?F?A?U???̑S?̑?????₷????????悤?B
KDDI?̍ő?1422?????̏??R?????????@???̗??ɂ͗???USB???Ɠ??l?ɒ????̉e?H
KDDI?Ŕ????????ő?1422?????ɋy?ԏ??R?????B???̔w??ɂ́A?P?Ȃ?Ǝ㐫???p?ł͕Еt?????Ȃ??U???҂̑_?????????B?ꂵ?Ă???B?_?[?NWeb??OSINT?i???J????j???玖????ǐՂ??A???o?f?[?^?̍s????{?n?T?C?o?[?U???Ƃ̐ړ_?A????z?肳??郊?X?N????ƂƂƂ??ɉ??????B
?p?X?L?[?_?b????@Google Password Manager?̓????@?\??_???V?U????@
?p?X???[?h?ɑ???F?؎?i?Ƃ??ĕ??y???i?ރp?X?L?[?B???????A?????҂????\?????V???ȍU????@?́A???̈??S?????x????g?ʂ̎d?g?݁h?ɒ??ڂ??Ă????B?Í??Z?p???̂??̂?j?炸?AGoogle Password Manager???p?҂̔F?؏??ɓ??B?????@?Ƃ́B
?֘A?????N
Copyright © ITmedia, Inc. All Rights Reserved.
?A?C?e?B???f?B?A????̂??m?点
??IT eBook
???ڂ̃e?[?}
?ҏW??????̂??m?点
RSS?ɂ???
?A?C?e?B???f?B?AID?ɂ???
???[???}?K?W???o?^
??IT?̃??[???}?K?W???́A ???????A???ׂĖ????ł??B???Ѓ??[???}?K?W???????w?ǂ????????B
ITmedia?̓A?C?e?B???f?B?A??????Ђ̓o?^???W?ł??B
???f?B?A?ꗗ | ????SNS | ?L???ē? | ???₢???킹 | ?v???C?o?V?[?|???V?[ | RSS | ?^?c??? | ?̗p??? | ??????