CVE:CVE-2019-6974
CNNVD:CNNVD-201902-612
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel中的KVM存在资源管理错误漏洞。攻击者可借助kvm_ioctl_create_device() 利用该漏洞绕过限制。
solution:Upgrade linux linux_kernel to a higher version than 3.16.64,3.18.136,4.4.176,4.9.156,4.14.99,4.19.21,4.20.8,and avoid the version [3.10,3.16.64),[3.17,3.18.136),[3.19,4.4.176),[4.5,4.9.156),[4.10,4.14.99),[4.15,4.19.21),[4.20,4.20.8); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,18.10,and avoid the version 12.04,14.04,16.04,18.04,18.10; Upgrade f5 big-ip_access_policy_manager to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_analytics to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_application_acceleration_manager to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_application_security_manager to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_edge_gateway to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_fraud_protection_service to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_global_traffic_manager to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_link_controller to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_local_traffic_manager to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade f5 big-ip_webaccelerator to a higher version than 13.1.1,14.1.0,15.1.0,and avoid the version [13.0.0,13.1.1],[14.0.0,14.1.0],[15.0.0,15.1.0); Upgrade redhat openshift_container_platform to a higher version than 3.11,and avoid the version 3.11; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.5,and avoid the version 7.5; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0