CVE:CVE-2020-9383
CNNVD:CNNVD-202002-1166
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.5.6及之前版本中的drivers/block/floppy.c文件中‘set_fdc’函数存在缓冲区错误漏洞，该漏洞源于程序在分配FDC索引时，没有对其进行错误检查。攻击者可利用该漏洞获取敏感信息或导致拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 5.5.6,and avoid the version [3.16,5.5.6]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.10,and avoid the version 14.04,16.04,18.04,19.10; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp data_availability_services to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -