CVE:CVE-2018-8822
CNNVD:CNNVD-201803-704
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.15.11及之前版本中的fs/ncpfs/ncplib_kernel.c文件和Linux kernel 4.16-rc版本至4.16-rc6版本中的drivers/staging/ncpfs/ncplib_kernel.c文件的‘ncp_read_kernel’函数存在安全漏洞，该漏洞源于程序没有正确的处理缓冲区的长度。攻击者可借助恶意的NCPFS服务器利用该漏洞造成拒绝服务（崩溃）或执行代码。
solution:Upgrade linux linux_kernel to a higher version than 4.15.11,4.16:rc,4.16:rc1,4.16:rc2,4.16:rc3,4.16:rc4,4.16:rc5,4.16:rc6,and avoid the version (,4.15.11],4.16:rc,4.16:rc1,4.16:rc2,4.16:rc3,4.16:rc4,4.16:rc5,4.16:rc6; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,and avoid the version 12.04,14.04,16.04,17.10; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0