CVE:CVE-2022-0185
CNNVD:CNNVD-202201-1423
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在数字错误漏洞，该漏洞源于在 Linux kernel 的 Filesystem Context 中的 legacy_parse_param 函数验证提供的参数长度的方式中发现了一个基于堆的缓冲区溢出缺陷。 非特权（在启用非特权用户命名空间的情况下，否则需要命名空间的 CAP_SYS_ADMIN 特权）本地用户能够打开不支持文件系统上下文 API 的文件系统（因此回退到遗留处理）可以使用此缺陷来提升他们在系统上的权限。
solution:Upgrade linux linux_kernel to a higher version than 5.4.173,5.10.93,5.15.16,5.16.2,and avoid the version [5.1,5.4.173),[5.5,5.10.93),[5.11,5.15.16),[5.16,5.16.2); Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -