CVE:CVE-2020-11494
CNNVD:CNNVD-202004-085
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.6.2及之前版本中的drivers/net/can/slcan.c文件的slc_bump存在信息泄露漏洞。攻击者可利用该漏洞读取未初始化的can_frame数据，获取内核栈内存的敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 5.6.2,and avoid the version [3.16,5.6.2]; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.10,and avoid the version 14.04,16.04,18.04,19.10