CVE:CVE-2020-24394
CNNVD:CNNVD-202008-978
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.7.8之前版本中存在安全漏洞。攻击者可利用该漏洞为新增的文件系统对象设置不正确权限。
solution:Upgrade linux linux_kernel to a higher version than 5.7.8,and avoid the version (,5.7.8); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,and avoid the version 14.04,16.04,18.04,20.04; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade oracle sd-wan_edge to a higher version than 8.2,and avoid the version 8.2; Upgrade starwindsoftware starwind_virtual_san to a higher version than v8:build12533,v8:build12658,v8:build12859,v8:build13170,v8:build13586,v8:build13861,and avoid the version v8:build12533,v8:build12658,v8:build12859,v8:build13170,v8:build13586,v8:build13861