Linux kernel 代码问题漏洞

CNNVD-ID编号	CNNVD-202009-317
CVE编号	CVE-2020-14385
发布时间	2020-09-08
更新时间	2020-12-16
漏洞类型	代码问题
漏洞来源	N/A
危险等级	中危
威胁类型	本地
厂商	N/A

漏洞介绍

Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。

Linux kernel 中存在代码问题漏洞，该漏洞源于xfs attr shortform verify，导致致命错误。以下产品及版本受到影响：SUSE Linux Enterprise Module for Basesystem 15 SP2， SUSE Linux Enterprise Module for Development Tools 15 SP2。

漏洞补丁

目前厂商已发布升级了Linux kernel 代码问题漏洞的补丁，Linux kernel 代码问题漏洞的补丁获取链接：

https://lore.kernel.org/linux-xfs/63722af5-2d8d-2455-17ee-988defd3126f@redhat.com/

参考网址

来源:SUSE

链接：http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html
来源:MLIST

链接：https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html
来源:MISC

链接：https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f4020438fab05364018c91f7e02ebdd192085933
来源:CONFIRM

链接：https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14385
来源:UBUNTU

链接：https://usn.ubuntu.com/4576-1/
来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.4173/
来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/160199/Red-Hat-Security-Advisory-2020-5199-01.html
来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/159992/Red-Hat-Security-Advisory-2020-5050-01.html
来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/159635/Red-Hat-Security-Advisory-2020-4286-01.html
来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/160503/Red-Hat-Security-Advisory-2020-5441-01.html
来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.3505/
来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.3527/
来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-there-are-multiple-vulnerabilities-in-the-linux-kernel-used-in-ibm-elastic-storage-system-2/
来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/159698/Red-Hat-Security-Advisory-2020-4331-01.html
来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/159545/Ubuntu-Security-Notice-USN-4576-1.html
来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.4406/
来源:nvd.nist.gov

链接：https://nvd.nist.gov/vuln/detail/CVE-2020-14385
来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.3682/
来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.3993/
来源:vigilance.fr

链接：https://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-xfs-attr-shortform-verify-33264
来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.3341/

受影响实体

暂无

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202009-317