CVE:CVE-2022-2078
CNNVD:CNNVD-202206-2868
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel存在安全漏洞。攻击者利用该漏洞通过 nft_set_desc_concat_parse() 触发缓冲区溢出，从而导致拒绝服务并可能运行代码。
solution:Upgrade linux linux_kernel to a higher version than 5.19,and avoid the version (,5.19); Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0