A Linux Kernel Flaw Wannan ya sa Android na'urorin a Hadarin

Janairu 21, 2016

Kamar 'yan kwanakin da suka gabata, Perception Point, kamfanin Intanet na Isra'ila, ya gano wani yanayin tsaro a cikin kullun Linux wanda yake iko da saitunan masu iyaka, kwamfutar tafi-da-gidanka kuma, mafi mahimmanci, na'urorin na'ura ta Bluetooth . Mai dan gwanin kwamfuta yana so ya yi amfani da wannan yanayin, zai iya samun dama a cikin na'ura kuma ko dai sami damar shiga ba tare da izini ba ga bayanai ko kashe code kamar yadda ya so.

Ƙari game da Linux Kernel Flaw

Bisa ga masana, dalilin dashi yana cikin ainihin kwayar Linux , wanda yake da yawa a kan sabobin, PC da na'urorin Android. Wannan kuskure, wadda aka sanya sunan CVE-2016-0728, an yi imanin cewa sun kai kashi 60 cikin dari na duk na'urorin Android. Babu shakka, wannan kuskure ya fara bayyana a farkon 2012 a cikin Linux version 3.8 kuma har yanzu akwai a kan tsarin 32-bit da 64-bit Linux.

Abin damuwa a nan shi ne cewa rashin lafiyar ya kasance kusan kusan shekaru 3 kuma yana da damar halatta masu amfani da damar samun iko mara izini kan sabobin Linux, PC, Android da wasu na'urorin haɗi. Tana fitowa ne daga ƙwaƙwalwar maɓallin kernel kuma yana ba da damar gudu da ke gudana a ƙarƙashin mai amfani na gida don aiwatar da code a cikin kwaya. Wannan yana nufin cewa rashin lafiyar zai iya sanya bayanin masu amfani, ciki har da ƙididdigar asali da kuma boye-boye, a hadarin haɗari.

Ta yaya zai iya sanya barazanar zuwa Android

Abin da zai iya haifar da wannan yanayin shi ne babban damuwa shine cewa yana rinjayar duk kayan gine-gine, ciki har da ARM. Wannan ta atomatik yana nufin, cewa duk na'urorin Android ke gudana Android 4.4 KitKat kuma daga baya, tsayawa da za a tasiri shi. A halin yanzu, wannan asusun na kusan kashi 70 na dukkan na'urorin Android.

An riga an riga an san Android OS na babban digiri na fragmentation da sabunta jinkirin. Google ya ba da alamun tsaro tare da masana'antun na'ura, waɗanda suka yi amfani da su daban. Kamfanin ya rarraba wasu sabuntawa a cikin ƙungiyoyi tare da masu sintarwar wayar hannu . Don kara matsalolin al'amura, mafi yawan waɗannan na'urori sun karbi goyon bayan software kawai har tsawon watanni 18, bayan haka basu karɓar ƙarin ɗaukakawa ko alamu. Wannan yana nuna cewa yawancin masu amfani da na'ura, musamman waɗanda suke amfani da na'urorin Android tsofaffi, bazai iya samun wadatarwa ta yau da kullum ba.

Wannan lamari zai nuna alama ga masu amfani da cewa tsofaffin sigogi na Android ba zasu kasance lafiya ba don amfani da kuma cewa ya kamata su cigaba da haɓaka na'urorin su don samun sababbin siffofin tsaro da sauran ayyuka. Hakanan zai zama matsala mai mahimmanci game da matsala - ba kowa da kowa zai kasance da damar ci gaba da sauya wayar su ko kwamfutar hannu sau ɗaya a cikin shekaru biyu ba.

Ya zuwa yanzu, masana'antar fasahohi sun bayyana wa nau'ikan wayar da ke cikin wayoyin salula wadanda basu da ma'ana. A kwanan wata, babu wani harin da aka kai harin da ya haifar da barazana ga masu amfani. Duk da haka, gaskiyar ta tabbata cewa Android ita ce mummunan manufa ga malware kuma zai iya kasancewa wani al'amari ne kawai kafin wani ya kaddamar da hare-haren ta'addanci a kan halin da ake ciki a halin yanzu.

Abin da Linux da Google Shirin Ya Yi

Abin farin, kodayake yanayin rashin lafiyar ya wanzu, babu wani harin da aka kama a yanzu. Duk da haka, masana masu tsaro za su fara yin zurfi don gano idan an yi amfani da wannan kuskure a wani lokaci a cikin kwanan baya. Linux da Red Hat kungiyoyin tsaro sun riga suna aiki don ba da alamun alaƙa - ya kamata su kasance samuwa ta ƙarshen wannan makon. Duk da haka, akwai wasu tsare-tsaren da za su iya kasancewa masu sauƙi, a kalla a wani lokaci.

Google ba zai iya bayar da amsar da za ta iya ba da amsa ba a lokacin da za a lalata kuskure a cikin tsarin layi na Android. Wannan yanayin halitta, zama tushen budewa, zai kasance ga masana'antun na'ura da masu haɓaka don ƙarawa da rarraba alamar ga abokan ciniki. A halin yanzu, Google, kamar yadda kullum, zai ci gaba da samar da sabuntawa ta kowace rana da kuma bug fixes don ta Nexus line na Android na'urorin. Tsarin gwargwadon gudummawa don tallafa wa kowane samfurinsa na akalla shekaru 2 bayan kwanan wata sayarwa a cikin kantin sayar da kan layi .