CVE:CVE-2021-42008
CNNVD:CNNVD-202110-072
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.13.13之前版本存在缓冲区错误漏洞，该漏洞源于内核中的drivers/net/hamradio/6pack.c中的decode_data 函数有一个slab越界写入，攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
solution:Upgrade linux linux_kernel to a higher version than 4.4.282,4.9.281,4.14.245,4.19.205,5.4.143,5.10.61,5.13.13,and avoid the version [2.6.12,4.4.282),[4.5,4.9.281),[4.10,4.14.245),[4.15,4.19.205),[4.20,5.4.143),[5.5,5.10.61),[5.11,5.13.13); Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0