CVE:CVE-2020-12656
CNNVD:CNNVD-202005-111
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.6.10及之前版本中的net/sunrpc/auth_gss/gss_mech_switch.c文件的‘gss_mech_free’函数存在安全漏洞。攻击者可利用该漏洞造成拒绝服务（内存泄露）。
solution:Upgrade linux linux_kernel to a higher version than 5.6.10,and avoid the version (,5.6.10]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,and avoid the version 14.04,16.04,18.04,20.04; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2