CVE:CVE-2018-10901
CNNVD:CNNVD-201807-1892
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。KVM virtualization subsystem是其中的一个虚拟化子系统。
Linux kernel中的KVM virtualization子系统存在权限许可和访问控制问题漏洞。该漏洞源于网络系统或产品缺乏有效的权限许可和访问控制措施。
solution:Upgrade linux linux_kernel to a higher version than 2.6.36,and avoid the version (,2.6.36); Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.4,6.5,6.6,and avoid the version 6.4,6.5,6.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0