CVE:CVE-2018-20836
CNNVD:CNNVD-201905-168
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 4.20之前版本中存在资源管理错误漏洞。该漏洞源于网络系统或产品在运行过程中，并发代码需要互斥地访问共享资源时，对于并发访问的处理不当。
solution:Upgrade linux linux_kernel to a higher version than 3.16.72,3.18.140,4.4.180,4.9.175,4.14.118,4.19.42,and avoid the version (,3.16.72),[3.17,3.18.140),[3.19,4.4.180),[4.5,4.9.175),[4.10,4.14.118),[4.15,4.19.42); Upgrade canonical ubuntu_linux to a higher version than 16.04,and avoid the version 16.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade f5 traffix_signaling_delivery_controller to a higher version than 5.0.0,5.1.0,and avoid the version 5.0.0,5.1.0; netapp active_iq_unified_manager avoid the version [9.5,); Upgrade netapp snapprotect to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_&_hci_storage_node to a higher version than -; Upgrade netapp storage_replication_adapter_for_clustered_data_ontap to a higher version than -; netapp vasa_provider_for_clustered_data_ontap avoid the version [7.2,); netapp virtual_storage_console avoid the version [7.2,); Upgrade netapp hci_compute_node to a higher version than -; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1