CVE:CVE-2021-3772
CNNVD:CNNVD-202109-438
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel SCTP存在安全漏洞，如果攻击者知道正在使用的 IP 地址和端口号，并且攻击者可以发送带有欺骗性 IP 地址的数据包，那么攻击者可能能够通过无效块杀死现有的 SCTP 关联。
solution:Upgrade linux linux_kernel to a higher version than 5.15.0,and avoid the version (,5.15.0); Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 22.1.3,and avoid the version 22.1.3; Upgrade oracle communications_cloud_native_core_network_exposure_function to a higher version than 22.1.1,and avoid the version 22.1.1; Upgrade oracle communications_cloud_native_core_policy to a higher version than 22.2.0,and avoid the version 22.2.0; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.0,11.0.0,11.20,11.25,11.30,11.30.5r3,11.40,11.40.3r2,11.40.5,11.50.1,11.50.2,11.50.2:p1,11.60,11.60.0,11.60.1,11.60.3,11.70.1,11.70.2,and avoid the version 11.0,11.0.0,11.20,11.25,11.30,11.30.5r3,11.40,11.40.3r2,11.40.5,11.50.1,11.50.2,11.50.2:p1,11.60,11.60.0,11.60.1,11.60.3,11.70.1,11.70.2; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_&_hci_storage_node to a higher version than -; Upgrade netapp hci_compute_node to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h610c_firmware to a higher version than -; Upgrade netapp h610s_firmware to a higher version than -; Upgrade netapp h615c_firmware to a higher version than -