CVE:CVE-2022-0847
CNNVD:CNNVD-202203-522
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在安全漏洞，该漏洞源于新管道缓冲区结构的“flag”变量在 Linux 内核中的 copy_page_to_iter_pipe 和 push_pipe 函数中缺乏正确初始化。非特权本地用户利用该漏洞可以提升权限至root。以下产品和版本受到影响：Linux Kernel 5.8-5.16.11、5.8-5.15.25、5.8-5.10.102。
solution:Upgrade linux linux_kernel to a higher version than 5.10.102,5.15.25,5.16.11,and avoid the version [5.8,5.10.102),[5.15,5.15.25),[5.16,5.16.11); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_real_time to a higher version than 8,and avoid the version 8; Upgrade redhat enterprise_linux_for_real_time_for_nfv to a higher version than 8,and avoid the version 8; Upgrade redhat enterprise_linux_for_real_time_for_nfv_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_real_time_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat codeready_linux_builder to a higher version than -; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade ovirt ovirt-engine to a higher version than 4.4.10.2,and avoid the version 4.4.10.2; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade siemens scalance_lpe9403_firmware to a higher version than 2.0,and avoid the version (,2.0); Upgrade sonicwall sma1000_firmware to a higher version than 12.4.2-02044,and avoid the version (,12.4.2-02044]