CVE:CVE-2019-19448
CNNVD:CNNVD-201912-285
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.0.21版本和5.3.11版本中fs/btrfs/free-space-cache.c文件的‘try_merge_free_space’函数存在资源管理错误漏洞。攻击者可借助特制的btrfs文件系统镜像利用该漏洞执行任意代码或导致拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 5.0.21,5.3.11,and avoid the version 5.0.21,5.3.11; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,and avoid the version 14.04,16.04,18.04; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp data_availability_services to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp a700s_firmware to a higher version than -; Upgrade netapp fas_8300_firmware to a higher version than -; Upgrade netapp fas_8700_firmware to a higher version than -; Upgrade netapp fas_a400_firmware to a higher version than -; Upgrade netapp aff_8300_firmware to a higher version than -; Upgrade netapp aff_8700_firmware to a higher version than -; Upgrade netapp aff_a400_firmware to a higher version than -; Upgrade netapp h610s_firmware to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -