CVE:CVE-2021-22543
CNNVD:CNNVD-202105-1684
KVM是基于内核的虚拟机。
Linux KVM存在缓冲区错误漏洞，该漏洞允许用户能够启动和控制VM读取和写入随机内存页，并可能导致本地特权升级。
solution:Upgrade linux linux_kernel to a higher version than 2021-05-18,and avoid the version 2021-05-18; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade netapp baseboard_management_controller_h410c_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h300s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h500s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h700s_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h300e_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h500e_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h700e_firmware to a higher version than -; Upgrade netapp baseboard_management_controller_h410s_firmware to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -