CVE:CVE-2020-27825
CNNVD:CNNVD-202012-948
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel (5.10-rc1) 存在资源管理错误漏洞，该漏洞源于trace ring buffer.c中发现了一个use-after free缺陷。在不同的cpu上并行运行跟踪打开和调整cpu缓冲区大小时存在竞争问题，可能导致拒绝服务问题(DOS)。这个漏洞甚至允许具有特殊用户权限的本地攻击者可利用该漏洞对内核信息泄漏进行威胁。
solution:Upgrade linux linux_kernel to a higher version than 5.10:rc1,and avoid the version 5.10:rc1; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -