{"id":1725,"date":"2026-07-05T07:16:30","date_gmt":"2026-07-05T00:16:30","guid":{"rendered":"https:\/\/vncybers.vn\/ho-so-bad-epoll-lo-hong-leo-thang-dac-quyen-root-vuot-mat-ca-tri-tue-nhan-tao\/"},"modified":"2026-07-05T07:16:30","modified_gmt":"2026-07-05T00:16:30","slug":"ho-so-bad-epoll-lo-hong-leo-thang-dac-quyen-root-vuot-mat-ca-tri-tue-nhan-tao","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/ho-so-bad-epoll-lo-hong-leo-thang-dac-quyen-root-vuot-mat-ca-tri-tue-nhan-tao\/","title":{"rendered":"H\u1ed3 s\u01a1 Bad Epoll: L\u1ed7 h\u1ed5ng leo thang \u0111\u1eb7c quy\u1ec1n root &#8220;v\u01b0\u1ee3t m\u1eb7t&#8221; c\u1ea3 tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o"},"content":{"rendered":"<h2>Gi\u1edbi thi\u1ec7u v\u1ec1 Bad Epoll<\/h2>\n<p>M\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng trong nh\u00e2n Linux v\u1eeba \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 v\u1edbi t\u00ean g\u1ecdi <strong>Bad Epoll<\/strong> (m\u00e3 \u0111\u1ecbnh danh <strong>CVE-2026-46242<\/strong>). L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng b\u00ecnh th\u01b0\u1eddng kh\u00f4ng c\u00f3 quy\u1ec1n \u0111\u1eb7c bi\u1ec7t c\u00f3 th\u1ec3 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t ho\u00e0n to\u00e0n h\u1ec7 th\u1ed1ng v\u1edbi \u0111\u1eb7c quy\u1ec1n root. <strong>Bad Epoll<\/strong> \u1ea3nh h\u01b0\u1edfng r\u1ed9ng r\u00e3i \u0111\u1ebfn c\u00e1c h\u1ec7 \u0111i\u1ec1u h\u00e0nh Linux tr\u00ean m\u00e1y t\u00ednh c\u00e1 nh\u00e2n, m\u00e1y ch\u1ee7 v\u00e0 c\u1ea3 thi\u1ebft b\u1ecb Android.<\/p>\n<p>\u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd c\u1ee7a <strong>Bad Epoll<\/strong> kh\u00f4ng ch\u1ec9 n\u1eb1m \u1edf m\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m m\u00e0 c\u00f2n \u1edf vi\u1ec7c n\u00f3 \u0111\u00e3 &#8220;v\u01b0\u1ee3t m\u1eb7t&#8221; \u0111\u01b0\u1ee3c <strong>Mythos<\/strong> \u2013 m\u00f4 h\u00ecnh AI m\u1ea1nh m\u1ebd nh\u1ea5t c\u1ee7a Anthropic hi\u1ec7n nay. Trong khi <strong>Mythos<\/strong> c\u00f3 th\u1ec3 ph\u00e1t hi\u1ec7n ra m\u1ed9t l\u1ed7 h\u1ed5ng t\u01b0\u01a1ng t\u1ef1 tr\u01b0\u1edbc \u0111\u00f3, n\u00f3 l\u1ea1i ho\u00e0n to\u00e0n b\u1ecf l\u1ee1 <strong>Bad Epoll<\/strong>, cho th\u1ea5y s\u1ef1 ph\u1ee9c t\u1ea1p c\u1ef1c \u0111\u1ed9 c\u1ee7a c\u00e1c l\u1ed7i race-condition (t\u00ecnh tr\u1ea1ng tranh ch\u1ea5p) trong m\u00e3 ngu\u1ed3n nh\u00e2n h\u1ec7 \u0111i\u1ec1u h\u00e0nh.<\/p>\n<h2>C\u01a1 ch\u1ebf k\u1ef9 thu\u1eadt: Khi s\u00e1u ch\u1ec9 l\u1ec7nh quy\u1ebft \u0111\u1ecbnh v\u1eadn m\u1ec7nh h\u1ec7 th\u1ed1ng<\/h2>\n<p>L\u1ed7 h\u1ed5ng n\u00e0y n\u1eb1m trong <strong>epoll<\/strong>, m\u1ed9t t\u00ednh n\u0103ng ti\u00eau chu\u1ea9n c\u1ee7a Linux cho ph\u00e9p ch\u01b0\u01a1ng tr\u00ecnh theo d\u00f5i nhi\u1ec1u t\u1ec7p tin ho\u1eb7c k\u1ebft n\u1ed1i m\u1ea1ng c\u00f9ng l\u00fac. \u0110\u00e2y l\u00e0 th\u00e0nh ph\u1ea7n thi\u1ebft y\u1ebfu cho c\u00e1c m\u00e1y ch\u1ee7, d\u1ecbch v\u1ee5 m\u1ea1ng v\u00e0 tr\u00ecnh duy\u1ec7t web, khi\u1ebfn vi\u1ec7c v\u00f4 hi\u1ec7u h\u00f3a n\u00f3 l\u00e0 \u0111i\u1ec1u kh\u00f4ng th\u1ec3.<\/p>\n<p>V\u1ec1 m\u1eb7t k\u1ef9 thu\u1eadt, <strong>Bad Epoll<\/strong> l\u00e0 m\u1ed9t l\u1ed7i &#8220;use-after-free&#8221; (s\u1eed d\u1ee5ng b\u1ed9 nh\u1edb sau khi \u0111\u00e3 gi\u1ea3i ph\u00f3ng). L\u1ed7i x\u1ea3y ra khi hai ph\u1ea7n kh\u00e1c nhau c\u1ee7a nh\u00e2n Linux c\u1ed1 g\u1eafng d\u1ecdn d\u1eb9p c\u00f9ng m\u1ed9t \u0111\u1ed1i t\u01b0\u1ee3ng n\u1ed9i b\u1ed9 t\u1ea1i c\u00f9ng m\u1ed9t th\u1eddi \u0111i\u1ec3m. M\u1ed9t lu\u1ed3ng th\u1ef1c thi gi\u1ea3i ph\u00f3ng b\u1ed9 nh\u1edb trong khi lu\u1ed3ng kia v\u1eabn \u0111ang ghi d\u1eef li\u1ec7u v\u00e0o \u0111\u00f3. S\u1ef1 xung \u0111\u1ed9t n\u00e0y, d\u00f9 ch\u1ec9 di\u1ec5n ra trong m\u1ed9t c\u1eeda s\u1ed5 th\u1eddi gian c\u1ef1c ng\u1eafn \u2013 kho\u1ea3ng s\u00e1u ch\u1ec9 l\u1ec7nh m\u00e1y \u2013 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng l\u00e0m h\u1ecfng b\u1ed9 nh\u1edb nh\u00e2n v\u00e0 t\u1eeb \u0111\u00f3 leo thang \u0111\u1eb7c quy\u1ec1n l\u00ean m\u1ee9c cao nh\u1ea5t.<\/p>\n<p>Nh\u00e0 nghi\u00ean c\u1ee9u Jaeyoung Chung, ng\u01b0\u1eddi ph\u00e1t hi\u1ec7n ra l\u1ed7 h\u1ed5ng, cho bi\u1ebft vi\u1ec7c khai th\u00e1c th\u00e0nh c\u00f4ng \u0111\u00f2i h\u1ecfi k\u1ef9 thu\u1eadt c\u0103n ch\u1ec9nh th\u1eddi gian c\u1ef1c k\u1ef3 ch\u00ednh x\u00e1c. Tuy nhi\u00ean, m\u00e3 khai th\u00e1c (exploit) do \u00f4ng x\u00e2y d\u1ef1ng \u0111\u00e3 ch\u1ee9ng minh kh\u1ea3 n\u0103ng \u0111\u1ea1t \u0111\u01b0\u1ee3c quy\u1ec1n root v\u1edbi t\u1ef7 l\u1ec7 th\u00e0nh c\u00f4ng l\u00ean t\u1edbi 99% tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng th\u1eed nghi\u1ec7m.<\/p>\n<h2>M\u1ed1i \u0111e d\u1ecda th\u1ef1c t\u1ebf \u0111\u1ed1i v\u1edbi Android v\u00e0 tr\u00ecnh duy\u1ec7t<\/h2>\n<p style=\"text-align: center;\"><img decoding=\"async\" src=\"https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/07\/inline_bad_epoll.jpg\" alt=\"Ph\u00e2n t\u00edch m\u00e3 khai th\u00e1c Bad Epoll\" style=\"max-width: 100%; height: auto;\" \/><\/p>\n<p><strong>Bad Epoll<\/strong> tr\u1edf n\u00ean \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m v\u00ec hai l\u00fd do ch\u00ednh:<\/p>\n<ul>\n<li><strong>V\u01b0\u1ee3t r\u00e0o ch\u1eafn Sandbox:<\/strong> Theo b\u00e1o c\u00e1o, l\u1ed7 h\u1ed5ng c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t t\u1eeb b\u00ean trong m\u00f4i tr\u01b0\u1eddng sandbox c\u1ee7a tr\u00ecnh duy\u1ec7t Chrome \u2013 n\u01a1i v\u1ed1n ch\u1eb7n h\u1ea7u h\u1ebft c\u00e1c l\u1ed7i nh\u00e2n Linux kh\u00e1c.<\/li>\n<li><strong>T\u00e1c \u0111\u1ed9ng \u0111\u1ebfn Android:<\/strong> Kh\u00f4ng gi\u1ed1ng nh\u01b0 nhi\u1ec1u l\u1ed7i leo thang \u0111\u1eb7c quy\u1ec1n Linux kh\u00e1c th\u01b0\u1eddng b\u1ecb gi\u1edbi h\u1ea1n, <strong>Bad Epoll<\/strong> c\u00f3 th\u1ec3 ti\u1ebfp c\u1eadn v\u00e0 khai th\u00e1c tr\u00ean n\u1ec1n t\u1ea3ng Android.<\/li>\n<\/ul>\n<p>M\u1eb7c d\u00f9 hi\u1ec7n t\u1ea1i ch\u01b0a c\u00f3 b\u1eb1ng ch\u1ee9ng cho th\u1ea5y l\u1ed7 h\u1ed5ng n\u00e0y b\u1ecb khai th\u00e1c trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng th\u1ef1c t\u1ebf v\u00e0 n\u00f3 c\u0169ng ch\u01b0a xu\u1ea5t hi\u1ec7n trong danh m\u1ee5c KEV c\u1ee7a CISA, nh\u01b0ng c\u00e1c chuy\u00ean gia c\u1ea3nh b\u00e1o r\u1eb1ng s\u1ef1 xu\u1ea5t hi\u1ec7n c\u1ee7a m\u00e3 khai th\u00e1c m\u1eabu (Proof-of-Concept) tr\u00ean GitHub s\u1ebd s\u1edbm thu h\u00fat s\u1ef1 ch\u00fa \u00fd c\u1ee7a c\u00e1c nh\u00f3m t\u1ed9i ph\u1ea1m m\u1ea1ng.<\/p>\n<h2>B\u00e0i h\u1ecdc v\u1ec1 gi\u1edbi h\u1ea1n c\u1ee7a AI trong b\u1ea3o m\u1eadt<\/h2>\n<p>Vi\u1ec7c AI b\u1ecf l\u1ee1 <strong>Bad Epoll<\/strong> l\u00e0 m\u1ed9t b\u00e0i h\u1ecdc \u0111\u1eaft gi\u00e1. C\u00f3 hai l\u00fd do ch\u00ednh \u0111\u01b0\u1ee3c \u0111\u01b0a ra: th\u1ee9 nh\u1ea5t, c\u1eeda s\u1ed5 th\u1eddi gian x\u1ea3y ra l\u1ed7i qu\u00e1 nh\u1ecf khi\u1ebfn vi\u1ec7c m\u00f4 ph\u1ecfng chu\u1ed7i s\u1ef1 ki\u1ec7n l\u00e0 c\u1ef1c kh\u00f3; th\u1ee9 hai, l\u1ed7i n\u00e0y kh\u00f4ng \u0111\u1ec3 l\u1ea1i nhi\u1ec1u d\u1ea5u hi\u1ec7u r\u00f5 r\u00e0ng trong qu\u00e1 tr\u00ecnh th\u1ef1c thi, khi\u1ebfn c\u00e1c c\u00f4ng c\u1ee5 ph\u00e1t hi\u1ec7n l\u1ed7i ti\u00eau chu\u1ea9n c\u1ee7a nh\u00e2n Linux (nh\u01b0 KASAN) d\u1ec5 d\u00e0ng b\u1ecb qua m\u1eb7t.<\/p>\n<p>\u0110i\u1ec1u n\u00e0y kh\u1eb3ng \u0111\u1ecbnh r\u1eb1ng, d\u00f9 AI \u0111ang tr\u1edf th\u00e0nh tr\u1ee3 th\u1ee7 \u0111\u1eafc l\u1ef1c trong vi\u1ec7c t\u00ecm ki\u1ebfm l\u1ed7 h\u1ed5ng, nh\u01b0ng s\u1ef1 nh\u1ea1y b\u00e9n v\u00e0 t\u01b0 duy ph\u00e2n t\u00edch c\u1ee7a con ng\u01b0\u1eddi v\u1eabn \u0111\u00f3ng vai tr\u00f2 quy\u1ebft \u0111\u1ecbnh \u0111\u1ed1i v\u1edbi nh\u1eefng l\u1ed7i k\u1ef9 thu\u1eadt tinh vi nh\u1ea5t.<\/p>\n<h2>Khuy\u1ebfn ngh\u1ecb \u1ee9ng ph\u00f3<\/h2>\n<p>Hi\u1ec7n t\u1ea1i, b\u1ea3n v\u00e1 ch\u00ednh th\u1ee9c \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh. Ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb h\u1ec7 th\u1ed1ng v\u00e0 ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c khuy\u1ebfn ngh\u1ecb:<\/p>\n<ul>\n<li>C\u1eadp nh\u1eadt nh\u00e2n Linux l\u00ean phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t c\u00f3 ch\u1ee9a b\u1ea3n v\u00e1 (upstream commit <strong>a6dc643c6931<\/strong>). C\u00e1c b\u1ea3n ph\u00e2n ph\u1ed1i Linux nh\u01b0 Ubuntu, Debian, Red Hat c\u0169ng \u0111ang nhanh ch\u00f3ng \u0111\u01b0a b\u1ea3n v\u00e1 v\u00e0o kho l\u01b0u tr\u1eef ch\u00ednh th\u1ee9c.<\/li>\n<li>\u0110\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng Android, h\u00e3y ki\u1ec3m tra v\u00e0 c\u00e0i \u0111\u1eb7t c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt h\u00e0ng th\u00e1ng ngay khi c\u00f3 th\u00f4ng b\u00e1o t\u1eeb nh\u00e0 s\u1ea3n xu\u1ea5t. C\u00e1c thi\u1ebft b\u1ecb ch\u1ea1y nh\u00e2n phi\u00ean b\u1ea3n 6.4 tr\u1edf l\u00ean l\u00e0 nh\u00f3m \u0111\u1ed1i t\u01b0\u1ee3ng ch\u1ecbu \u1ea3nh h\u01b0\u1edfng tr\u1ef1c ti\u1ebfp.<\/li>\n<\/ul>\n<p style=\"text-align: right; margin-top: 40px;\"><em><strong>VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News, CISA v\u00e0 GitHub<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Gi\u1edbi thi\u1ec7u v\u1ec1 Bad Epoll M\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng trong nh\u00e2n Linux v\u1eeba \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 v\u1edbi t\u00ean g\u1ecdi Bad Epoll (m\u00e3 \u0111\u1ecbnh danh CVE-2026-46242). L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng b\u00ecnh th\u01b0\u1eddng kh\u00f4ng c\u00f3 quy\u1ec1n \u0111\u1eb7c bi\u1ec7t c\u00f3 th\u1ec3 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t ho\u00e0n to\u00e0n h\u1ec7 th\u1ed1ng v\u1edbi \u0111\u1eb7c quy\u1ec1n [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1724,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1725"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1725\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1724"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}