CVE:CVE-2019-3900
CNNVD:CNNVD-201904-1153
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux Kernel 5.1-rc6版本及之前版本存在资源管理错误漏洞，该漏洞源于在vhost_net 内核模块中发现了无限循环问题。攻击者可用该漏造成vhost_net内核线程停止，导致拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 5.1,5.1:rc1,5.1:rc2,5.1:rc3,5.1:rc4,5.1:rc5,5.1:rc6,and avoid the version (,5.1),5.1:rc1,5.1:rc2,5.1:rc3,5.1:rc4,5.1:rc5,5.1:rc6; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,and avoid the version 16.04,18.04,19.04; netapp active_iq_unified_manager_for_vmware_vsphere avoid the version [9.5,); Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp snapprotect to a higher version than -; Upgrade netapp solidfire to a higher version than -; netapp storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere avoid the version [7.2,); netapp vasa_provider_for_clustered_data_ontap avoid the version [7.2,); netapp virtual_storage_console_for_vmware_vsphere avoid the version [7.2,); Upgrade netapp cn1610_firmware to a higher version than -; Upgrade oracle sd-wan_edge to a higher version than 8.2,and avoid the version 8.2