CVE:CVE-2018-18559
CNNVD:CNNVD-201810-1118
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.19及之前版本中存在释放后重用漏洞。攻击者可利用该漏洞控制程序计数器。
solution:Upgrade linux linux_kernel to a higher version than 3.2.100,3.15,3.18.88,4.1.49,4.3,4.4.106,4.9.70,4.14.7,and avoid the version [3.2.95,3.2.100),[3.14.58,3.15),[3.18.25,3.18.88),[4.1.14,4.1.49),[4.2.7,4.3),[4.3.1,4.4.106),[4.5,4.9.70),[4.10,4.14.7); Upgrade redhat openshift_container_platform to a higher version than 3.11,and avoid the version 3.11; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0