CVE:CVE-2022-1158
CNNVD:CNNVD-202204-2924
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在资源管理错误漏洞。攻击者可以通过 cmpxchg_gpte() 触发 Linux kernel 的内存损坏，以触发拒绝服务，并可能运行代码。
solution:Upgrade linux linux_kernel to a higher version than 5.4.189,5.10.110,5.15.33,5.16.19,5.17.2,and avoid the version [5.2,5.4.189),[5.5,5.10.110),[5.11,5.15.33),[5.16,5.16.19),[5.17,5.17.2); Upgrade fedoraproject fedora to a higher version than 36,and avoid the version 36; Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0