CVE:CVE-2021-4197
CNNVD:CNNVD-202201-1396
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在授权问题漏洞，攻击者可利用该漏洞通过Cgroup Fd Writing绕过Linux内核的限制以提升权限。
solution:Upgrade linux linux_kernel to a higher version than 4.14.276,4.19.238,5.4.189,5.10.111,5.15.14,and avoid the version [4.2,4.14.276),[4.15,4.19.238),[4.20,5.4.189),[5.5,5.10.111),[5.11,5.15.14); Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 22.1.1,22.1.3,22.2.0,and avoid the version 22.1.1,22.1.3,22.2.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade broadcom brocade_fabric_operating_system_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -