CVE:CVE-2022-28796
CNNVD:CNNVD-202204-2668
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.17.1 之前版本存在竞争条件问题漏洞，该漏洞源于 fs/jbd2/transaction.c 中的 jbd2_journal_wait_updates 具有由 transaction_t 竞争条件导致的 use-after-free。
solution:Upgrade linux linux_kernel to a higher version than 5.17.1,and avoid the version (,5.17.1); Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp solidfire,_enterprise_sds_&_hci_storage_node to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp hci_compute_node_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -