CVE:CVE-2019-13272
CNNVD:CNNVD-201907-809
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.1.17之前版本中存在安全漏洞，该漏洞源于kernel/ptrace.c文件的ptrace_link没有正确处理对凭证的记录。攻击者可利用该漏洞获取root访问权限。
solution:Upgrade linux linux_kernel to a higher version than 3.16.71,4.2,4.4.185,4.9,4.9.185,4.14.133,4.19.58,5.1.17,and avoid the version [3.16.52,3.16.71),[4.1.39,4.2),[4.4.40,4.4.185),[4.8.16,4.9),[4.9.1,4.9.185),[4.10,4.14.133),[4.15,4.19.58),[4.20,5.1.17); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 29,and avoid the version 29; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,and avoid the version 16.04,18.04,19.04; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_for_real_time to a higher version than 8,and avoid the version 8; Upgrade netapp aff_a700s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h610s_firmware to a higher version than -; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp e-series_performance_analyzer to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.60.3,and avoid the version [11.0.0,11.60.3]; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp service_processor to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp hci_compute_node to a higher version than -