CVE:CVE-2022-25258
CNNVD:CNNVD-202202-1360
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.16.10之前版本存在代码问题漏洞，该漏洞源于USB Gadget子系统缺乏对接口操作系统描述符请求（具有大数组索引的请求和与空函数指针检索相关的请求）的特定验证，可能导致内存损坏。
solution:Upgrade linux linux_kernel to a higher version than 5.16.10,and avoid the version (,5.16.10); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -