CVE:CVE-2020-14356
CNNVD:CNNVD-202008-982
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.7.10之前版本中的cgroupv2子系统存在代码问题漏洞。攻击者可利用该漏洞造成系统崩溃或提升权限。
solution:Upgrade linux linux_kernel to a higher version than 4.9.231,4.14.189,4.19.134,5.4.53,5.7.10,and avoid the version [4.5,4.9.231),[4.10,4.14.189),[4.15,4.19.134),[4.20,5.4.53),[5.5,5.7.10); Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,and avoid the version 14.04,16.04,18.04,20.04; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -