CVE:CVE-2019-19947
CNNVD:CNNVD-201912-1033
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.4.6及之前版本中的drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c驱动程序存在安全漏洞。攻击者可利用该漏洞泄露未初始化的内存。
solution:Upgrade linux linux_kernel to a higher version than 5.4.6,and avoid the version (,5.4.6]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.10,and avoid the version 14.04,16.04,18.04,19.10; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp data_availability_services to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.2,and avoid the version [11.0,11.70.2]; Upgrade netapp fas/aff_baseboard_management_controller to a higher version than -; Upgrade netapp hci_baseboard_management_controller to a higher version than h610s,and avoid the version h610s; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp aff_baseboard_management_controller to a higher version than a700s,and avoid the version a700s; Upgrade netapp solidfire_baseboard_management_controller to a higher version than -