CVE:CVE-2019-18808
CNNVD:CNNVD-201911-404
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.3.9及之前版本中的drivers/crypto/ccp/ccp-ops.c文件的‘ccp_run_sha_cmd()’函数存在安全漏洞。攻击者可利用该漏洞造成拒绝服务（内存消耗）。
solution:Upgrade linux linux_kernel to a higher version than 5.3.9,and avoid the version (,5.3.9]; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,and avoid the version 14.04,16.04,18.04,20.04