CVE:CVE-2022-34918
CNNVD:CNNVD-202207-366
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。netfilter是一款使用在Linux系统中的数据包过滤框架。
Linux kernel 5.18.9版本及之前版本存在安全漏洞，该漏洞源于。本地攻击者利用该漏洞使用 nft_set_elem_init 中的类型混淆错误（导致缓冲区溢出）来提升权限。
solution:Upgrade linux linux_kernel to a higher version than 5.10.130,5.15.54,5.18.11,and avoid the version [4.1,5.10.130),[5.11,5.15.54),[5.16,5.18.11); Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,22.04,and avoid the version 14.04,16.04,18.04,20.04,22.04; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -