CVE:CVE-2021-4154
CNNVD:CNNVD-202201-1700
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在资源管理错误漏洞，该漏洞源于 Linux kernel 的 cgroup v1 解析器中 kernel/cgroup/cgroup-v1.c 中的 cgroup1_parse_param() 函数中的 use-after-free 错误。 本地用户可以通过 fsconfig syscall 参数执行任意代码，导致容器突破。该漏洞允许本地用户提升系统权限。
solution:Upgrade linux linux_kernel to a higher version than 5.4.134,5.10.52,5.12.19,5.13.4,5.14:rc1,and avoid the version [5.1,5.4.134),[5.5,5.10.52),[5.11,5.12.19),[5.13,5.13.4),5.14:rc1; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade netapp hci_baseboard_management_controller to a higher version than h300e,h300s,h410s,h500e,h500s,h700e,h700s,and avoid the version h300e,h300s,h410s,h500e,h500s,h700e,h700s