CVE:CVE-2020-25645
CNNVD:CNNVD-202010-605
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux内核 5.9-rc7之前版本存在安全漏洞，该漏洞源于当IPsec被配置为加密由Geneve隧道使用的特定UDP端口的流量时，两个Geneve端点之间的流量可能是未加密的，允许这两个端点之间的任何人读取未加密的流量。这个漏洞的主要威胁是数据的机密性。
solution:Upgrade linux linux_kernel to a higher version than 5.9.0,5.9.0,5.9.0:rc1,5.9.0:rc2,5.9.0:rc3,5.9.0:rc4,5.9.0:rc5,5.9.0:rc6,and avoid the version (,5.9.0),5.9.0,5.9.0:rc1,5.9.0:rc2,5.9.0:rc3,5.9.0:rc4,5.9.0:rc5,5.9.0:rc6; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_&_hci_storage_node to a higher version than -; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade netapp hci_compute_node_bios to a higher version than -; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,and avoid the version 14.04,16.04,18.04,20.04