CVE:CVE-2022-1652
CNNVD:CNNVD-202206-309
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.17.5 版本及之前版本存在安全漏洞，该漏洞源于 bad_flp_intr 函数中的并发释放后重用问题。攻击者利用该漏洞可在系统上执行任意代码或造成拒绝服务情况。
solution:Upgrade linux linux_kernel to a higher version than 4.9.316,4.14.281,4.19.245,5.4.196,5.10.118,5.15.42,5.17.10,and avoid the version [2.6.12,4.9.316),[4.10,4.14.281),[4.15,4.19.245),[4.20,5.4.196),[5.5,5.10.118),[5.11,5.15.42),[5.16,5.17.10); Upgrade redhat enterprise_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -