CVE:CVE-2022-29581
CNNVD:CNNVD-202205-3580
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 4.14 版本到 5.18 版本存在安全漏洞，该漏洞源于 net/sched 中的引用计数更新不当。本地攻击者利用该漏洞可以将权限提升到root。
solution:Upgrade linux linux_kernel to a higher version than 4.14.278,4.19.241,5.4.191,5.10.113,5.15.36,5.17.5,and avoid the version [4.14,4.14.278),[4.15,4.19.241),[4.20,5.4.191),[5.5,5.10.113),[5.11,5.15.36),[5.16,5.17.5); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,22.04,and avoid the version 14.04,16.04,18.04,20.04,22.04; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -