{"id":10813,"date":"2026-04-30T23:39:47","date_gmt":"2026-04-30T20:39:47","guid":{"rendered":"https:\/\/neoberidhaber.kahveciyazilim.com\/?p=10813"},"modified":"2026-04-30T23:39:48","modified_gmt":"2026-04-30T20:39:48","slug":"linuxta-yillardir-kapatilmayan-acik-tespit-edildi","status":"publish","type":"post","link":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/2026\/04\/30\/linuxta-yillardir-kapatilmayan-acik-tespit-edildi\/","title":{"rendered":"Linux\u2019ta Y\u0131llard\u0131r Kapat\u0131lmayan A\u00e7\u0131k Tespit Edildi"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Xint.io ve Theori ekipleri taraf\u0131ndan ortaya \u00e7\u0131kar\u0131lan bu zafiyet, Linux \u00e7ekirde\u011finin kriptografik alt sistemindeki bir mant\u0131k hatas\u0131ndan kaynaklan\u0131yor. \u00d6zellikle algif_aead mod\u00fcl\u00fcn\u00fc etkileyen bu sorun, 2017 y\u0131l\u0131ndan bu yana da\u011f\u0131t\u0131lan neredeyse t\u00fcm Linux s\u00fcr\u00fcmlerinde mevcut durumda.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Copy Fail Nas\u0131l \u00c7al\u0131\u015f\u0131yor?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">S\u00f6z konusu g\u00fcvenlik a\u00e7\u0131\u011f\u0131, yetkisiz bir yerel kullan\u0131c\u0131n\u0131n herhangi bir okunabilir dosyan\u0131n sayfa \u00f6nbelle\u011fine d\u00f6rt baytl\u0131k veri yazmas\u0131na imkan tan\u0131yor. Bu i\u015flem, basit bir Python beti\u011fi kullan\u0131larak setuid ikili dosyalar\u0131n\u0131n d\u00fczenlenmesi ve k\u00f6k dizin eri\u015fimi elde edilmesiyle sonu\u00e7lan\u0131yor.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/ares.shiftdelete.net\/2026\/04\/linuxta-yillardir-kapatilmayan-acik-tespit-edildi-2.webp\" alt=\"Linux, Copy Fail, CVE-2026-31431, g\u00fcvenlik a\u00e7\u0131\u011f\u0131, siber g\u00fcvenlik\" class=\"wp-image-1259925\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131r\u0131 s\u00fcreci, bir AF_ALG soketinin a\u00e7\u0131lmas\u0131 ve ard\u0131ndan \u00e7ekirde\u011fin \u00f6nbelle\u011fe al\u0131nm\u0131\u015f \/usr\/bin\/su dosyas\u0131na yazma i\u015fleminin tetiklenmesi ad\u0131mlar\u0131n\u0131 i\u00e7eriyor. Bu y\u00f6ntemle sisteme s\u0131zan kullan\u0131c\u0131lar, y\u00f6netici yetkilerine sahip olarak t\u00fcm k\u0131s\u0131tlamalar\u0131 a\u015fabiliyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu zafiyet, uzaktan do\u011frudan tetiklenebilir olmasa da yerel bir kullan\u0131c\u0131n\u0131n sistem \u00fczerindeki t\u00fcm s\u00fcre\u00e7leri etkilemesine olanak sa\u011fl\u0131yor. Sayfa \u00f6nbelle\u011finin sistemdeki t\u00fcm s\u00fcre\u00e7ler aras\u0131nda payla\u015f\u0131lmas\u0131, a\u00e7\u0131\u011f\u0131n konteynerler aras\u0131 etkiler yaratmas\u0131na da yol a\u00e7\u0131yor.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Da\u011f\u0131t\u0131mlardan G\u00fcvenlik G\u00fcncellemesi<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Copy Fail, 2022 y\u0131l\u0131nda ke\u015ffedilen Dirty Pipe g\u00fcvenlik a\u00e7\u0131\u011f\u0131 ile benzerlik g\u00f6steriyor. Uzmanlar, her iki zafiyetin de sayfa \u00f6nbelle\u011fine veri s\u0131zd\u0131r\u0131lmas\u0131 temelinde \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve benzer bir s\u0131n\u0131fland\u0131rmaya girdi\u011fini belirtiyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Amazon Linux, Debian, Red Hat Enterprise Linux, SUSE ve Ubuntu gibi b\u00fcy\u00fck Linux da\u011f\u0131t\u0131mlar\u0131, s\u00f6z konusu g\u00fcvenlik a\u00e7\u0131\u011f\u0131na kar\u015f\u0131 kendi g\u00fcvenlik b\u00fcltenlerini yay\u0131nlad\u0131. Kullan\u0131c\u0131lar\u0131n sistemlerini korumak i\u00e7in ilgili da\u011f\u0131t\u0131mlar\u0131n sa\u011flad\u0131\u011f\u0131 g\u00fcncellemeleri takip etmeleri \u00f6nem ta\u015f\u0131yor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n ta\u015f\u0131nabilir, k\u00fc\u00e7\u00fck ve gizli olmas\u0131, onu olduk\u00e7a tehlikeli k\u0131l\u0131yor. Ayn\u0131 zamanda herhangi bir yar\u0131\u015f durumu veya \u00e7ekirdek ofseti gerektirmemesi, sald\u0131rganlar\u0131n bu a\u00e7\u0131\u011f\u0131 g\u00fcvenilir bir \u015fekilde kullanabilmesine olanak tan\u0131yor.<a href=\"https:\/\/yalingundem.com.tr\/linuxta-yillardir-kapatilmayan-acik-tespit-edildi\/\"><\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kaynak ve G\u00f6rseller: <a href=\"https:\/\/yalingundem.com.tr\/linuxta-yillardir-kapatilmayan-acik-tespit-edildi\/\">Karde\u015f Haber &#8211; Yal\u0131n G\u00fcndem <\/a><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>G\u00fcncellenme Tarihi:<\/strong> Nisan 30, 2026 23:39<\/p>\n","protected":false},"excerpt":{"rendered":"G\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131, Linux i\u015fletim sistemlerinde yerel kullan\u0131c\u0131lar\u0131n y\u00f6netici yetkilerine eri\u015fmesine olanak tan\u0131yan yeni bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 duyurdu. CVE-2026-31431 koduyla takip edilen ve Copy Fail olarak adland\u0131r\u0131lan bu a\u00e7\u0131k, 7.8 CVSS puan\u0131 ile y\u00fcksek risk seviyesinde s\u0131n\u0131fland\u0131r\u0131l\u0131yor.","protected":false},"author":1,"featured_media":10814,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_display_header_overlay":false,"csco_singular_sidebar":"","csco_page_header_type":"","csco_page_load_nextpost":"","csco_post_video_location":[],"csco_post_video_location_hash":"","csco_post_video_url":"","csco_post_video_bg_start_time":0,"csco_post_video_bg_end_time":0,"footnotes":""},"categories":[1,15],"tags":[],"class_list":["post-10813","post","type-post","status-publish","format-standard","has-post-thumbnail","category-genel","category-teknoloji","cs-entry","cs-video-wrap"],"_links":{"self":[{"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/posts\/10813","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/comments?post=10813"}],"version-history":[{"count":1,"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/posts\/10813\/revisions"}],"predecessor-version":[{"id":10815,"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/posts\/10813\/revisions\/10815"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/media\/10814"}],"wp:attachment":[{"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/media?parent=10813"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/categories?post=10813"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/neoberidhaber.kahveciyazilim.com\/index.php\/wp-json\/wp\/v2\/tags?post=10813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}