CVE:CVE-2021-3640
CNNVD:CNNVD-202107-1701
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在资源管理错误漏洞，攻击者可利用该漏洞通过Linux内核的sco send frame()函数强制使用已释放的内存区域，从而触发拒绝服务，并运行任意代码。
solution:Upgrade linux linux_kernel to a higher version than 4.9.291,4.14.256,4.19.218,5.4.160,5.10.80,5.14.19,5.15.3,and avoid the version (4.4.293,),[4.5,4.9.291),[4.10,4.14.256),[4.15,4.19.218),[4.20,5.4.160),[5.5.0,5.10.80),[5.11,5.14.19),[5.15,5.15.3),no fixed version after 4.4.293; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,21.10,and avoid the version 14.04,16.04,18.04,20.04,21.10; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -