CVE:CVE-2022-27666
CNNVD:CNNVD-202203-2027
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.16.15之前版本存在安全漏洞，该漏洞源于net/ipv4/esp4.c 和 net/ipv6/esp6.c 中IPsec ESP 代码存在缓冲区溢出。本地攻击者可利用该漏洞通过覆盖内核堆对象获得特权。
solution:Upgrade linux linux_kernel to a higher version than 5.17,5.17,5.17:rc1,5.17:rc2,5.17:rc3,5.17:rc4,5.17:rc5,5.17:rc6,5.17:rc7,and avoid the version (,5.17),5.17,5.17:rc1,5.17:rc2,5.17:rc3,5.17:rc4,5.17:rc5,5.17:rc6,5.17:rc7; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0