CVE:CVE-2022-2905
CNNVD:CNNVD-202208-4254
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel存在安全漏洞，该漏洞源于攻击者可以通过bpf_tail_call()强制读取 Linux 内核的无效内存地址，以触发拒绝服务或获取敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 6.0,6.0:rc1,6.0:rc2,6.0:rc3,and avoid the version (,6.0),6.0:rc1,6.0:rc2,6.0:rc3; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0