漏洞信息详情
Linux kernel 资源管理错误漏洞
- CNNVD编号：CNNVD-201908-1265
- 危害等级： 中危
- CVE编号： CVE-2019-15214
- 漏洞类型： 资源管理错误
- 发布时间： 2019-08-19
- 威胁类型： 本地
- 更新时间： 2020-10-29
- 厂 商：
- 漏洞来源： Ubuntu
漏洞简介
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 5.0.10之前版本中的sound子系统存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。
漏洞公告
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10
参考网址
来源:MISC
链接:https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2a3f7221acddfe1caa9ff09b3a8158c39b2fdeac
来源:MISC
链接:https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10
来源:syzkaller.appspot.com
链接:https://syzkaller.appspot.com/bug?id=75903e0021cef79bc434d068b5169b599b2a46a9
来源:git.kernel.org
链接:https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c2f870890fd28e023b0fcf49dcee333f2c8bad7
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20190905-0002/
来源:UBUNTU
链接:https://usn.ubuntu.com/4115-1/
来源:MLIST
链接:http://www.openwall.com/lists/oss-security/2019/08/20/2
来源:UBUNTU
链接:https://usn.ubuntu.com/4118-1/
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.HTML
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.HTML
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192984-1.HTML
来源:www.intel.com
链接:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00237.HTML
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.HTML
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192952-1.HTML
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192951-1.HTML
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192950-1.HTML
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192949-1.HTML
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192948-1.HTML
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.HTML
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.HTML
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/4116-1/
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/4115-1/
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/4114-1/
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-15214
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-publicly-disclosed-vulnerabilities-from-kernel-affect-ibm-netezza-host-management-8/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3334.2/
来源:access.redhat.com
链接:https://access.redhat.com/security/cve/cve-2019-15214
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/154446/Ubuntu-Security-Notice-USN-4115-2.HTML
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3334/
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Linux-kernel-use-after-free-via-sound-core-30105
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4346/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4252/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/154315/Ubuntu-Security-Notice-USN-4115-1.HTML
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4346.2/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-linux-kernel-affect-ibm-spectrum-protect-plus-2/
受影响实体
暂无
补丁
- Linux kernel 资源管理错误漏洞的修复措施
评论