CVE:CVE-2020-29569
CNNVD:CNNVD-202012-1135
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel through 5.10.1 与 Xen 4.14.x 一起使用时存在资源管理错误漏洞，该漏洞源于Linux内核PV块后端期望内核线程处理程序在停止时将ring->xenblkd重置为NULL。但是，如果前端在连接和断开状态之间快速切换，处理程序可能没有时间运行。因此，块后端可能会在释放指针后重用指针。行为不端的客户机可以通过持续连接、断开块前端的连接来触发dom0崩溃。不能排除特权升级和信息泄露的可能性。
solution:Upgrade xen xen to a higher version than 4.14.1,and avoid the version (,4.14.1]; Upgrade linux linux_kernel to a higher version than 4.2,4.4.254,4.9.249,4.12,4.14.213,4.19.164,5.4.86,5.10.4,and avoid the version [4.1.44,4.2),[4.4.80,4.4.254),[4.9.36,4.9.249),[4.11.9,4.12),[4.12,4.14.213),[4.15,4.19.164),[4.20,5.4.86),[5.5,5.10.4); Upgrade netapp hci_compute_node_bios to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_&_hci_storage_node to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0