CVE:CVE-2021-3609
CNNVD:CNNVD-202106-1440
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在竞争条件问题漏洞，该漏洞源于在Linux内核中发现一个缺陷，bcm_release() 和 bcm_rx_handler() 之间发生竞争条件。攻击者可利用该漏洞导致本地权限提升
solution:Upgrade linux linux_kernel to a higher version than 4.4.276,4.9.276,4.14.240,4.19.198,5.4.132,5.10.50,5.12.17,5.13.2,and avoid the version [2.6.25,4.4.276),[4.5,4.9.276),[4.10,4.14.240),[4.15,4.19.198),[4.20,5.4.132),[5.5.0,5.10.50),[5.11,5.12.17),[5.13,5.13.2); Upgrade redhat 3scale_api_management to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat build_of_quarkus to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat codeready_linux_builder_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat codeready_linux_builder_for_power_little_endian_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat openshift_container_platform to a higher version than 4.6,4.7,4.8,and avoid the version 4.6,4.7,4.8; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_aus to a higher version than 8.2,and avoid the version 8.2; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus_s390x to a higher version than 8.1,and avoid the version 8.1; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_for_real_time to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_real_time_for_nfv to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_real_time_for_nfv_tus to a higher version than 8.0,8.2,and avoid the version 8.0,8.2; Upgrade redhat enterprise_linux_for_real_time_tus to a higher version than 8.0,8.2,and avoid the version 8.0,8.2; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h610c_firmware to a higher version than -; Upgrade netapp h610s_firmware to a higher version than -; Upgrade netapp h615c_firmware to a higher version than -