CVE:CVE-2021-4204
CNNVD:CNNVD-202201-897
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在缓冲区错误漏洞，该漏洞源于在执行用户提供的 eBPF 程序之前缺乏适当的验证。攻击者可以利用此漏洞升级权限并在内核上下文中执行代码。
solution:Upgrade linux linux_kernel to a higher version than 5.8.0,5.8.0,and avoid the version (,5.8.0),5.8.0; Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0; Upgrade redhat enterprise_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -