CVE:CVE-2019-12615
CNNVD:CNNVD-201906-039
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.1.6及之前版本中的arch/sparc/kernel/mdesc.c文件的get_vdev_port_node_info存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade linux linux_kernel to a higher version than 4.14.130,4.19.56,5.1.15,2.6.12:rc2,2.6.12:rc3,2.6.12:rc4,2.6.12:rc5,2.6.12:rc6,5.2:rc1,5.2:rc2,5.2:rc3,5.2:rc4,and avoid the version [2.6.12.1,4.14.130),[4.19,4.19.56),[5.1,5.1.15),2.6.12:rc2,2.6.12:rc3,2.6.12:rc4,2.6.12:rc5,2.6.12:rc6,5.2:rc1,5.2:rc2,5.2:rc3,5.2:rc4; Upgrade netapp aff_a700s_firmware to a higher version than -; netapp active_iq_unified_manager avoid the version [9.5,); Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp cn1610_firmware to a higher version than -; Upgrade netapp h610s_firmware to a higher version than -