CVE:CVE-2019-17052
CNNVD:CNNVD-201910-028
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.3.2及之前版本中的AF_AX25网络模块中的net/ax25/af_ax25.c文件的ax25_create函数存在安全漏洞。攻击者可利用该漏洞创建原始套接字。
solution:Upgrade linux linux_kernel to a higher version than 5.3.2,and avoid the version [3.16,5.3.2]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 29,and avoid the version 29; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.04,and avoid the version 14.04,16.04,18.04,19.04