CVE:CVE-2021-4157
CNNVD:CNNVD-202203-2249
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel存在缓冲区错误漏洞，该漏洞源于用户使用镜像的方式中存在内存溢出缺陷。有权访问 NFS 挂载的用户利用该漏洞可以使系统崩溃或提升系统权限。
solution:Upgrade linux linux_kernel to a higher version than 4.4.269,4.9.269,4.14.233,4.19.191,5.4.120,5.10.38,5.11.22,5.12.5,and avoid the version [4.0,4.4.269),[4.5,4.9.269),[4.10,4.14.233),[4.15,4.19.191),[4.20,5.4.120),[5.5,5.10.38),[5.11,5.11.22),[5.12,5.12.5); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 22.1.1,22.1.3,22.2.0,and avoid the version 22.1.1,22.1.3,22.2.0