CVE:CVE-2018-17972
CNNVD:CNNVD-201810-133
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.18.11及之前版本中的fs/proc/base.c文件的‘proc_pid_stack’函数存在访问控制错误漏洞。本地攻击者可通过发送特制的请求利用该漏洞获取内核任务栈内容。
solution:Upgrade linux linux_kernel to a higher version than 4.18.11,and avoid the version (,4.18.11]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,18.10,and avoid the version 12.04,14.04,16.04,18.04,18.10; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,7.6,and avoid the version 7.0,7.6; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0