CVE:CVE-2019-18683
CNNVD:CNNVD-201911-066
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.3.8及之前版本中的drivers/media/platform/vivid存在资源管理错误漏洞。本地攻击者可利用该漏洞提升权限。
solution:Upgrade linux linux_kernel to a higher version than 5.3.8,and avoid the version (,5.3.8]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.10,and avoid the version 14.04,16.04,18.04,19.10; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp data_availability_services to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.1,and avoid the version [11.0.0,11.70.1]; Upgrade netapp element_software to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade broadcom fabric_operating_system to a higher version than -; Upgrade netapp a700s_firmware to a higher version than -; Upgrade netapp 8300_firmware to a higher version than -; Upgrade netapp 8700_firmware to a higher version than -; Upgrade netapp a400_firmware to a higher version than -; Upgrade netapp h610s_firmware to a higher version than -; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0