CVE:CVE-2018-19985
CNNVD:CNNVD-201901-005
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.19.8及之前版本中的drivers/net/usb/hso.c文件的‘hso_get_config_data’函数存在越界读取漏洞。攻击者可利用该漏洞读取内核地址空间。
solution:Upgrade linux linux_kernel to a higher version than 4.19.8,and avoid the version (,4.19.8]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade netapp active_iq_performance_analytics_services to a higher version than -; Upgrade netapp element_software_management_node to a higher version than -