CVE:CVE-2021-33200
CNNVD:CNNVD-202105-1772
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux Kernel 5.12.7版本及之前版本中存在缓冲区错误漏洞，该漏洞源于对指针算术操作强制执行不正确的限制，可能会滥用这些操作在内核内存中执行越位的读写操作。攻击者可通过该漏洞从本地特权升级到root。
solution:Upgrade linux linux_kernel to a higher version than 5.4.123,5.10.41,5.12.8,and avoid the version [5.4.116,5.4.123),[5.10.33,5.10.41),[5.11.17,5.12.8); Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -