CVE:CVE-2020-29661
CNNVD:CNNVD-202012-778
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.9.13 版本及之前版本存在资源管理错误漏洞，该漏洞源于子系统中发现了一个锁定问题。驱动tty tty jobctrl.c允许使用后免费攻击TIOCSPGRP，又名CID-54ffccbf053b。
solution:Upgrade linux linux_kernel to a higher version than 4.4.248,4.9.248,4.14.212,4.19.163,5.4.83,5.9.14,and avoid the version [2.6.26,4.4.248),[4.5,4.9.248),[4.10,4.14.212),[4.15,4.19.163),[4.20,5.4.83),[5.5,5.9.14); Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade broadcom fabric_operating_system to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp a700s_firmware to a higher version than -; Upgrade netapp 8300_firmware to a higher version than -; Upgrade netapp 8700_firmware to a higher version than -; Upgrade netapp a400_firmware to a higher version than -; Upgrade oracle tekelec_platform_distribution to a higher version than 7.7.1,and avoid the version [7.4.0,7.7.1]