CVE:CVE-2020-14386
CNNVD:CNNVD-202009-294
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.9-rc4之前版本中af_packet.c存在安全漏洞。该漏洞允许攻击者触发拒绝服务并执行代码。
solution:Upgrade linux linux_kernel to a higher version than 4.9.239,4.14.201,4.19.150,5.4.64,5.8.8,5.9.0:rc1,5.9.0:rc2,5.9.0:rc3,and avoid the version [4.6,4.9.239),[4.10,4.14.201),[4.15,4.19.150),[4.20,5.4.64),[5.5,5.8.8),5.9.0:rc1,5.9.0:rc2,5.9.0:rc3; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1