CVE:CVE-2023-1380
CNNVD:CNNVD-202303-2301
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux Kernel存在安全漏洞，该漏洞源于当assoc_info->req_len数据大于定义为WL_EXTRA_BUF_MAX的缓冲区大小时，会导致系统拒绝服务。
solution:Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade linux linux_kernel to a higher version than 4.14.315,4.19.283,5.4.243,5.10.180,5.15.110,6.1.27,6.2.14,6.3,6.3:rc1,6.3:rc2,6.3:rc3,6.3:rc4,6.3:rc5,6.3:rc6,6.3:rc7,and avoid the version [3.2.1,4.14.315),[4.19,4.19.283),[5.4,5.4.243),[5.10,5.10.180),[5.15,5.15.110),[6.1,6.1.27),[6.2,6.2.14),6.3,6.3:rc1,6.3:rc2,6.3:rc3,6.3:rc4,6.3:rc5,6.3:rc6,6.3:rc7; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -