CVE:CVE-2018-20669
CNNVD:CNNVD-201901-905
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 4.19.13及之前版本中的drivers/gpu/drm/i915/i915_gem_execbuffer.c文件中的i915_gem_execbuffer2_ioctl存在输入验证错误漏洞，该漏洞源于程序缺少‘access_ok()’检查。本地攻击者可利用该漏洞绕过限制，提升权限。
solution:Upgrade linux linux_kernel to a higher version than 4.14.185,4.19.129,5.0,and avoid the version [4.13,4.14.185),[4.15,4.19.129),[4.20,5.0); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,and avoid the version 14.04,16.04,18.04; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp snapprotect to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp cn1610_firmware to a higher version than -