CVE:CVE-2020-13974
CNNVD:CNNVD-202006-740
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.7.1及之前版本中的drivers/tty/vt/keyboard.c文件存在输入验证错误漏洞。本地攻击者可利用该漏洞在系统上执行任意代码。
solution:Upgrade linux linux_kernel to a higher version than 4.4.227,4.9.227,4.14.184,4.19.128,5.4.46,5.6.18,5.7.2,and avoid the version (,4.4.227),[4.5,4.9.227),[4.10,4.14.184),[4.15,4.19.128),[4.20,5.4.46),[5.5,5.6.18),[5.7,5.7.2); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,and avoid the version 14.04,16.04,18.04,20.04