CVE:CVE-2021-3612
CNNVD:CNNVD-202106-1443
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在缓冲区错误漏洞，该漏洞源于在Linux内核的操纵杆设备子系统中发现了一个越位内存读写缺陷，通过用户调用ioctl JSIOCSBTNMAP的方式。攻击者可利用该漏洞使系统崩溃，或者可能升级他们在系统上的特权。
solution:Upgrade linux linux_kernel to a higher version than 5.9.0,and avoid the version (,5.9.0); Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 22.1.3,and avoid the version 22.1.3; Upgrade oracle communications_cloud_native_core_network_exposure_function to a higher version than 22.1.1,and avoid the version 22.1.1; Upgrade oracle communications_cloud_native_core_policy to a higher version than 22.2.0,and avoid the version 22.2.0; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -