漏洞信息详情
Linux kernel 资源管理错误漏洞
漏洞简介
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.2.6之前版本中的drivers/media/v4l2-core/v4l2-dev.c文件存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源(如内存、磁盘空间、文件等)的管理不当。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c666355e60ddb4748ead3bdd983e3f7f2224aaf0
参考网址
来源:syzkaller.appspot.com
链接:https://syzkaller.appspot.com/bug?id=775f90f43cfd6f8ac6c15251ce68e604453da226
来源:git.kernel.org
链接:https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c666355e60ddb4748ead3bdd983e3f7f2224aaf0
来源:cdn.kernel.org
链接:https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.6
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20190905-0002/
来源:UBUNTU
链接:https://usn.ubuntu.com/4115-1/
来源:MLIST
链接:http://www.openwall.com/lists/oss-security/2019/08/20/2
来源:UBUNTU
链接:https://usn.ubuntu.com/4118-1/
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192984-1.html
来源:www.intel.com
链接:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00237.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192952-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192951-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192950-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192949-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192948-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/4116-1/
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/4115-1/
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/4114-1/
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192424-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192414-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192412-1.html
来源:lists.debian.org
链接:https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3570/
来源:access.redhat.com
链接:https://access.redhat.com/security/cve/cve-2019-15211
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3505/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3334/
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Linux-kernel-use-after-free-via-drivers-media-radio-radio-raremono-c-30102
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4346/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4252/
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-15211
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/154315/Ubuntu-Security-Notice-USN-4115-1.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4346.2/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-linux-kernel-affect-ibm-spectrum-protect-plus-2/
受影响实体
暂无
补丁
- Linux kernel 资源管理错误漏洞的修复措施<!--2019-8-19-->
还没有评论,来说两句吧...