CVE:CVE-2019-7221
CNNVD:CNNVD-201902-611
Linux kernel是美国Linux基金会的发布的开源操作系统Linux所使用的内核。KVM是其中的一个基于内核的虚拟机。
Linux kernel中的KVM存在释放后重用漏洞。攻击者可借助KVM Preemption Timer利用该漏洞绕过限制，提升权限。
solution:Upgrade linux linux_kernel to a higher version than 4.20.5,and avoid the version (,4.20.5]; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0; Upgrade fedoraproject fedora to a higher version than 28,29,and avoid the version 28,29; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade netapp active_iq_performance_analytics_services to a higher version than -; Upgrade netapp element_software_management_node to a higher version than -; Upgrade redhat openshift_container_platform to a higher version than 3.11,and avoid the version 3.11; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0