CVE:CVE-2020-29660
CNNVD:CNNVD-202012-776
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel through 5.9.13 存在资源管理错误漏洞，该漏洞源于tty子系统中发现了一个锁定不一致问题。驱动tty tty io.c和驱动tty tty jobctrl.c可能允许对TIOCGSID，即CID-c8bcd9c5be24进行无读后攻击。
solution:Upgrade linux linux_kernel to a higher version than 5.9.13,and avoid the version (,5.9.13]; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade broadcom fabric_operating_system to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp a700s_firmware to a higher version than -; Upgrade netapp 8300_firmware to a higher version than -; Upgrade netapp 8700_firmware to a higher version than -; Upgrade netapp a400_firmware to a higher version than -