CVE:CVE-2020-28374
CNNVD:CNNVD-202101-947
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel before 5.10.7 存在路径遍历漏洞，该漏洞源于drivers/target/target_core_xcopy.c标识符检查不足，攻击者可利用该漏洞通过XCOPY请求中的目录遍历来读写文件。
solution:Upgrade linux linux_kernel to a higher version than 5.10.7,and avoid the version (,5.10.7); Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0