CVE:CVE-2022-40768
CNNVD:CNNVD-202209-1412
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.19.9及以前的版本存在安全漏洞，该漏洞源于其drivers/scsi/stex.c组件允许本地用户从内核内存中获取敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 5.19.9,and avoid the version (,5.19.9]; Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0