CVE:CVE-2020-25643
CNNVD:CNNVD-202010-133
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。KVM是其中的一个基于内核的虚拟机。
Linux kernel 5.9-rc7版本存在安全漏洞，该漏洞源于HDLC PPP模块发现了一个缺陷。内存损坏和读溢出是由ppp cp解析cr函数中不正确的输入验证引起的，攻击者可利用该漏洞导致系统崩溃或拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 4.4.238,4.9.238,4.14.200,4.19.148,5.4.68,5.8.12,5.9.0:rc1,5.9.0:rc2,5.9.0:rc3,5.9.0:rc4,5.9.0:rc5,5.9.0:rc6,and avoid the version [2.6.29,4.4.238),[4.5,4.9.238),[4.10,4.14.200),[4.15,4.19.148),[4.20,5.4.68),[5.5,5.8.12),5.9.0:rc1,5.9.0:rc2,5.9.0:rc3,5.9.0:rc4,5.9.0:rc5,5.9.0:rc6; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade netapp h410c_firmware to a higher version than -; Upgrade starwindsoftware starwind_virtual_san to a higher version than v8:build12533,v8:build12658,v8:build12859,v8:build13170,v8:build13586,v8:build13861,and avoid the version v8:build12533,v8:build12658,v8:build12859,v8:build13170,v8:build13586,v8:build13861