CVE:CVE-2019-19534
CNNVD:CNNVD-201912-138
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.3.11之前版本中的drivers/net/can/usb/peak_usb/pcan_usb_core.c驱动程序存在信息泄露漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 5.3.11,and avoid the version (,5.3.11); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.04,19.10,and avoid the version 14.04,16.04,18.04,19.04,19.10