CVE:CVE-2020-10942
CNNVD:CNNVD-202003-1519
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.5.8之前版本存在安全漏洞，该漏洞源于drivers/vhost/net.c文件的get_raw_socket没有验证sk_family字段。攻击者可借助特制的系统调用利用该漏洞造成内核栈损坏。
solution:Upgrade linux linux_kernel to a higher version than 5.5.8,and avoid the version (,5.5.8); Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.10,and avoid the version 14.04,16.04,18.04,19.10