CVE:CVE-2022-32250
CNNVD:CNNVD-202206-407
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.18.1版本及之前版本存在安全漏洞，该漏洞源于net/netfilter/nf_tables_api.c允许本地用户将权限升级为root用户，攻击者利用该漏洞可导致释放后重用。
solution:Upgrade linux linux_kernel to a higher version than 4.9.318,4.14.283,4.19.247,5.4.198,5.10.120,5.15.45,5.17.13,5.18.2,and avoid the version [4.1,4.9.318),[4.10,4.14.283),[4.15,4.19.247),[4.20,5.4.198),[5.5,5.10.120),[5.11,5.15.45),[5.16,5.17.13),[5.18,5.18.2); Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -