CVE:CVE-2020-10757
CNNVD:CNNVD-202006-509
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 4.5-rc1之后版本中mremap处理DAX Huge Pages的方式存在缓冲区错误漏洞。攻击者可利用该漏洞提升权限。
solution:Upgrade linux linux_kernel to a higher version than 5.6.16,4.5:rc2,4.5:rc3,4.5:rc4,4.5:rc5,4.5:rc6,4.5:rc7,and avoid the version [4.5.1,5.6.16],4.5:rc2,4.5:rc3,4.5:rc4,4.5:rc5,4.5:rc6,4.5:rc7; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0; Upgrade fedoraproject fedora to a higher version than 31,and avoid the version 31; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,20.04,and avoid the version 16.04,18.04,20.04; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -