CVE:CVE-2019-14821
CNNVD:CNNVD-201909-887
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.3及之前版本中的KVM虚拟机监视器的实现存在缓冲区错误漏洞。攻击者可利用该漏洞造成主机内核崩溃，导致拒绝服务或可能提升权限。
solution:Upgrade linux linux_kernel to a higher version than 3.15.10,3.16.74,4.4.194,4.9.194,4.14.146,4.19.75,5.2.17,5.3.1,5.4:rc1,and avoid the version [2.6.27,3.15.10],[3.16,3.16.74),[4.4,4.4.194),[4.9,4.9.194),[4.14,4.14.146),[4.19,4.19.75),[5.2,5.2.17),[5.3,5.3.1),5.4:rc1; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_for_real_time to a higher version than 7,8,and avoid the version 7,8; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.04,and avoid the version 14.04,16.04,18.04,19.04; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade netapp aff_a700s_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h610s_firmware to a higher version than -; Upgrade netapp data_availability_services to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade oracle sd-wan_edge to a higher version than 7.3,8.0,8.1,8.2,and avoid the version 7.3,8.0,8.1,8.2