CVE:CVE-2019-11884
CNNVD:CNNVD-201905-264
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.0.15之前版本中的net/bluetooth/hidp/sock.c文件的‘do_hidp_sock_ioctl’函数存在命令注入漏洞。该漏洞源于外部输入数据构造可执行命令过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞执行非法命令。
solution:Upgrade linux linux_kernel to a higher version than 5.0.15,and avoid the version (,5.0.15); Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,and avoid the version 16.04,18.04,19.04; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,8.6,and avoid the version 8.1,8.2,8.4,8.6; Upgrade redhat enterprise_linux_for_real_time to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_real_time_for_nfv_tus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat enterprise_linux_for_real_time_tus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade opensuse leap to a higher version than 15.0,15.1,42.3,and avoid the version 15.0,15.1,42.3