{"id":166393,"date":"2020-01-07T09:00:24","date_gmt":"2020-01-07T01:00:24","guid":{"rendered":"https:\/\/lrxjmw.cn\/?p=166393"},"modified":"2019-12-23T19:34:28","modified_gmt":"2019-12-23T11:34:28","slug":"receive-important-kernel","status":"publish","type":"post","link":"https:\/\/lrxjmw.cn\/receive-important-kernel.html","title":{"rendered":"Linux 7 \u548c CentOS 7 \u6536\u5230\u91cd\u8981\u5185\u6838\u5b89\u5168\u66f4\u65b0"},"content":{"rendered":"\n\n\n
\u5bfc\u8bfb<\/td>\nRed Hat \u548c CentOS \u5ba3\u5e03\u4e86\u5176 Red Hat Enterprise Linux 7 \u548c CentOS Linux 7 \u64cd\u4f5c\u7cfb\u7edf\u7cfb\u5217\u91cd\u8981\u5185\u6838\u5b89\u5168\u66f4\u65b0\u7684\u53ef\u7528\u6027\u3002<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\"\"<\/p>\n

\u636e\u6089\uff0c\u8fd9\u4e9b\u66f4\u65b0\u89e3\u51b3\u4e86\u4e24\u4e2a\u5b89\u5168\u6f0f\u6d1e\u548c\u8bb8\u591a\u5176\u4ed6 bug\u3002<\/p>\n

\u5177\u4f53\u8868\u73b0\u4e3a\uff0c\u65b0\u7684 Linux \u5185\u6838\u5b89\u5168\u66f4\u65b0\u6b64\u6b21\u4fee\u590d\u4e86 CVE-2019-14821\u548c CVE-2019-15239 \u4e24\u4e2a\u6f0f\u6d1e\u3002<\/p>\n

\u5176\u4e2d\uff0cCVE-2019-15239 \u53ef\u80fd\u4f7f\u672c\u5730\u653b\u51fb\u8005\u89e6\u53d1\u591a\u4e2a\u201cuse-after-free\u201d\u6761\u4ef6\uff0c\u5bfc\u81f4\u5185\u6838\u5d29\u6e83\u6216\u6f5c\u5728\u7684\u7279\u6743\u5347\u7ea7\u3002<\/p>\n

\u6b64\u5916\uff0c\u5185\u6838\u66f4\u65b0\u8fd8\u89e3\u51b3\u4e86\u591a\u4e2a bug\uff0c\u5305\u62ec\u6709\uff1a<\/p>\n

    \n
  1. check_preempt_wakeup + 0x109 \u5904\u7684 NULL \u6307\u9488\u53d6\u6d88\u5f15\u7528<\/li>\n
  2. pick_next_task_rt \u51fa\u73b0\u6050\u614c<\/li>\n
  3. \u9002\u914d\u5668\u91cd\u7f6e\u5bfc\u81f4\u201c\u68c0\u6d4b\u5230\u7684 Tx \u5355\u5143\u6302\u8d77\u201d\u9519\u8bef<\/li>\n
  4. VF LAG \u914d\u7f6e\u4e0a\u7684\u5e73\u8861\u8d1f\u8f7d\u4e2d\u65ad<\/li>\n
  5. \u52a0\u5bc6 vmx \u9a71\u52a8\u7a0b\u5e8f\u4e0a\u7684\u5b89\u5168\u6027\u95ee\u9898<\/li>\n
  6. \u5355 CPU VM \u5728 open_posix_testsuite \u671f\u95f4\u6302\u8d77<\/li>\n
  7. .......<\/li>\n<\/ol>\n

    \u6566\u4fc3\u7528\u6237\u5c3d\u5feb\u5c06\u5176\u5b89\u88c5\u66f4\u65b0\u5230 kernel-3.10.0-1062.7.1.el7.x86_64\uff0c\u5e76\u5728\u6210\u529f\u5e94\u7528\u65b0\u5185\u6838\u7248\u672c\u540e\u91cd\u65b0\u542f\u52a8\u8ba1\u7b97\u673a\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

    \u636e\u6089\uff0c\u8fd9\u4e9b\u66f4\u65b0\u89e3\u51b3\u4e86\u4e24\u4e2a\u5b89\u5168\u6f0f\u6d1e\u548c\u8bb8\u591a\u5176\u4ed6 bug\u3002 \u5177\u4f53\u8868\u73b0\u4e3a\uff0c\u65b0\u7684 Linux \u5185\u6838\u5b89\u5168\u66f4\u65b0\u6b64\u6b21\u4fee\u590d\u4e86 C […]<\/p>\n","protected":false},"author":1481,"featured_media":166395,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[21],"tags":[],"class_list":["post-166393","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/166393","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/users\/1481"}],"replies":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/comments?post=166393"}],"version-history":[{"count":7,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/166393\/revisions"}],"predecessor-version":[{"id":167970,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/166393\/revisions\/167970"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media\/166395"}],"wp:attachment":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media?parent=166393"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/categories?post=166393"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/tags?post=166393"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}