CVE:CVE-2022-47519
CNNVD:CNNVD-202212-3481
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 6.0.11之前版本存在安全漏洞，该漏洞源于WILC1000 无线驱动程序中的 drivers/net/wireless/microchip/wilc1000/cfg80211.c 中缺少对 IEEE80211_P2P_ATTR_OPER_CHANNEL 的验证，在从 Wi-Fi 管理帧解析信道列表属性时会触发越界写入。
solution:Upgrade linux linux_kernel to a higher version than 5.10.157,5.15.81,6.0.11,and avoid the version [4.2,5.10.157),[5.11,5.15.81),[5.16,6.0.11); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -