CVE:CVE-2017-18344
CNNVD:CNNVD-201807-1886
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.14.8之前版本中的kernel/time/posix-timers.c文件存在安全漏洞，该漏洞源于timer_create系统调用的实现没有正确地验证sigevent->sigev_notify字段。攻击者可利用该漏洞读取任意的内核内存（越界读取）。
solution:Upgrade linux linux_kernel to a higher version than 4.14.8,and avoid the version (,4.14.8); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,and avoid the version 12.04,14.04; Upgrade redhat mrg_realtime to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,7.3,7.4,and avoid the version 7.2,7.3,7.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.3,7.5,and avoid the version 7.3,7.5; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,7.4,and avoid the version 7.2,7.3,7.4; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0