2026-10-22 22:19:50 +08:00

452 lines
20 KiB
HTML
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<!DOCTYPE html><html lang="zh-Hans" theme-color="default" theme-mode=""><head>
<meta charset="UTF-8">
<title>Linux Kernel 权限提升漏洞预警 - JSKCloud</title>
<meta name="keywords" content="帮助文档">
<meta name="description" content="我们的帮助文档提供了丰富的资料和资源,包括产品手册、技术文档等。您可以轻松地找到所需的信息,帮助您更好地了解我们的产品和服务。我们不断更新和完善文档,确保您始终能够获得最新的信息。">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="Content-Language" content="zh-cn">
<link rel="stylesheet" href="../../assets/92c1df3730f31c-iconfont.css">
<link rel="stylesheet" href="../../assets/7bd641cba5f6a0-reset.css">
<link rel="stylesheet" href="../../assets/478794f28834cd-style.css">
<link rel="stylesheet" href="../../assets/e5adc0b1fcadda-theme.css">
<link rel="stylesheet" href="../../assets/054352c1c64ab4-common.css">
<link rel="stylesheet" href="../../assets/51c94e2cd9af75-animate.css">
<script src="../../assets/dea655e39abf18-jquery-3.5.1.min.js"></script>
<link rel="stylesheet" href="../../assets/43319114264162-bootstrap.min.css">
<script src="../../assets/b7c64cb3919aba-bootstrap.min.js"></script>
<link rel="stylesheet" href="../../assets/c7ac28884e5076-swiper-bundle.min.css">
<script src="../../assets/130071f2a87d70-swiper-bundle.min.js"></script>
<link rel="stylesheet" href="../../assets/b828918322b016-document.css">
<style>
/* 移动端适配 */
@media (max-width: 768px) {
/* 横幅区域优化 */
.server-banner2.banner-document {
padding: 30px 0;
}
.server-banner2 .section-content {
padding: 0 15px;
}
.server-banner2 h1 {
font-size: 24px;
margin-bottom: 12px;
}
.server-banner-desc2 {
font-size: 14px;
line-height: 1.6;
margin-bottom: 25px;
}
/* 搜索框适配 */
.input-search {
width: 100%;
flex-direction: column;
}
#document-input {
width: 100% !important;
margin-bottom: 10px;
height: 44px !important;
}
.search-btn {
width: 100% !important;
/* height: 44px !important;
line-height: 44px !important; */
text-align: center;
}
/* 文档列表适配 */
.docement-list {
margin: 0;
flex-direction: column;
}
.docement-list .document-box {
width: 100%;
min-height: auto;
margin: 10px 0;
padding: 20px;
box-sizing: border-box;
}
.document-box .document-header {
padding-bottom: 15px;
}
.document-box a {
font-size: 14px;
line-height: 1.6;
height: auto;
}
/* 隐藏桌面端导航 */
.page .nav-left {
display: none;
}
.page .nav-right,
.page .content-page {
padding-left: 0;
left: 0;
}
/* 内容区域优化 */
.page .page-content {
padding: 20px 15px;
margin-left: 0;
height: auto;
}
.document-cont {
padding: 20px 0 !important;
}
/* 文档详情适配 */
.document-details .document-view-item .document-view-cont {
padding: 15px;
}
.document-details .document-view-item .document-view-cont a {
width: 100%;
padding-right: 0;
}
}
/* 小屏幕优化 (≤480px) */
@media (max-width: 480px) {
.document-box {
padding: 15px !important;
}
.document-header img {
width: 24px !important;
height: 24px !important;
}
.document-details .document-view-head {
padding-left: 15px !important;
}
.page .page-content .document-head h2 {
font-size: 20px;
}
}
</style>
<link rel="canonical" href="8.html"><link rel="alternate" hreflang="zh-Hans" href="8.html"><link rel="alternate" hreflang="zh-Hant" href="../../zh-hk/announce/8.html"><link rel="alternate" hreflang="en" href="../../en/announce/8.html"><link rel="stylesheet" href="../../assets/site.css"><link rel="stylesheet" href="../../assets/0b5e1239e3594e-css2.css"><link rel="stylesheet" href="../../assets/bc27011c64b70c-css2.css"><link rel="stylesheet" href="../../assets/0fb05ab27d6c47-css2.css"></head>
<body data-static-site="jskcloud"><header><style>
/* 语言选择器样式 */
.language-selector {
position: relative;
margin-right: 20px;
cursor: pointer;
z-index: 99999;
}
.language-selected {
display: flex;
align-items: center;
padding: 8px 12px;
border-radius: 6px;
background-color: rgba(255, 255, 255, 0.1);
transition: all 0.3s ease;
}
.language-selected:hover {
background-color: rgba(255, 255, 255, 0.2);
}
.language-flag {
margin-right: 8px;
font-size: 16px;
}
.language-code {
font-weight: 500;
margin-right: 8px;
}
.language-arrow {
transition: transform 0.3s ease;
}
.language-selector.active .language-arrow {
transform: rotate(180deg);
}
.language-dropdown {
position: absolute;
top: 100%;
/* right: 0; */
width: 140px;
background: #fff;
border-radius: 8px;
box-shadow: 0 4px 12px rgba(0, 0, 0, 0.15);
opacity: 0;
visibility: hidden;
transform: translateY(10px);
transition: all 0.3s ease;
z-index: 1000;
}
.language-selector.active .language-dropdown {
opacity: 1;
visibility: visible;
transform: translateY(0);
}
.language-option {
display: flex;
align-items: center;
padding: 10px 12px;
color: #333;
transition: all 0.2s ease;
}
.language-option:hover {
background-color: #f5f5f5;
}
.language-option .language-flag {
margin-right: 10px;
}
.language-name {
font-size: 14px;
}
</style>
<div class="nav-shadow">
<div class="section-content nav-header">
<div class="nav-left">
<div class="nav-icon">
<a href="../index.html"><img src="../../assets/f47e84e194e9c4-c47cdbdba8c01d82740fc430f77aaa6f1792437534-222.png" alt=""></a>
</div>
<div class="nav-menu">
<div>
<a href="../index.html">
<div class="nav-item">产品中心</div>
</a>
<div class="nav-cont">
<div class="section-content">
<div class="nav-cont-menu animated slideInDown">
<div class="nav-content ">
<a href="../cloud.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">云服务器</div>
</div>
</div>
</a>
<a href="../dedicated.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">独立服务器</div>
</div>
</div>
</a>
<a href="../balance.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">负载均衡</div>
</div>
</div>
</a>
<a href="../box.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">BOX服务器</div>
</div>
</div>
</a>
</div>
</div>
</div>
</div>
</div>
<div>
<a href="../index.html">
<div class="nav-item">关于我们</div>
</a>
<div class="nav-cont">
<div class="section-content">
<div class="nav-cont-menu animated slideInDown">
<div class="nav-content ">
<a href="../about.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">公司简介</div>
</div>
</div>
</a>
<a href="../contact.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">联系我们</div>
</div>
</div>
</a>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="mobile-menu-btn" id="mobileMenuBtn"></div>
</div>
<div class="nav-right">
<div class="language-selector">
<div class="language-selected">
<span class="language-flag">🌐</span>
<span class="language-code">简体中文</span>
<svg class="language-arrow" width="10" height="6" viewBox="0 0 10 6" fill="none" xmlns="http://www.w3.org/2000/svg">
<path d="M1 1L5 5L9 1" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path>
</svg>
</div>
<div class="language-dropdown">
<a class="language-option" data-lang="en" href="../../en/announce/8.html" lang="en" hreflang="en">English</a>
<a class="language-option" data-lang="zh-cn" href="8.html" lang="zh-cn" hreflang="zh-cn" aria-current="true">简体中文</a>
<a class="language-option" data-lang="zh-hk" href="../../zh-hk/announce/8.html" lang="zh-hk" hreflang="zh-hk">繁體中文</a>
</div>
</div>
</div>
</div>
</div>
<div class="aside-tools">
<div class="tools-list">
<div class="tools-item">
<img src="../../assets/82c093ab92edb0-f801662fa2daa58d6b518f4642a32aed1742560323-tg.jpg" alt="">
<div class="tools-box">
<div class="tools-box-s">
<h5>联系客服</h5>
<p><a target="_blank" href="https://t.me/JSK215" rel="noopener noreferrer"> 客服 - 觉觉</a></p>
<p><a target="_blank" href="https://t.me/JSKdang" rel="noopener noreferrer"> 客服 - 叮当</a></p>
<p><a target="_blank" href="https://t.me/JSKyoumi" rel="noopener noreferrer"> 客服 - 优米</a></p>
<p><a target="_blank" href="https://t.me/JSK_666" rel="noopener noreferrer"> 客服 - 千禧</a></p>
<p><a target="_blank" href="https://t.me/JSK116" rel="noopener noreferrer"> 客服 - 熊猫</a></p>
<p><a target="_blank" href="https://t.me/JSK0003" rel="noopener noreferrer"> 客服 - 闹闹</a></p>
<p><a target="_blank" href="https://t.me/JSK88801" rel="noopener noreferrer"> 客服 - 诗诗</a></p>
<p><a target="_blank" href="https://t.me/JSKyaoyao" rel="noopener noreferrer"> 客服 - 梦瑶</a></p> </div>
</div>
</div>
</div>
</div>
</header><main class="static-main"><article class="static-article"><h1>Linux Kernel 权限提升漏洞预警</h1><div class="static-date">2023-03-31</div>
<div data-version="3.0.0" data-hash="8d79c66e2e82515c6921bbe8aae6c4a1">&nbsp;</div>
<div>
<div class="document">
<div class="section">
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">尊敬的主题云用户:</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">您好! 近日, Linux kernel 被披露出存在本地提权漏洞,漏洞编号CVE-2022-2588,可导致攻击者权获得root权限等危害。</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【漏洞评级】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">高风险</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【漏洞描述】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">CVE-2022-2588</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">漏洞由于在Linux kernel 的 net/sched/cls_route.c 过滤器实现的 route4_change 中存在 use-after-free 缺陷导致,若被本地经过身份认证的攻击者利用,可能会导致系统崩溃、权限提升等。</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【影响范围】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">影响版本</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Linux kernel &gt;= v2.6.12-rc2</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【修复方案】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">目前官方已在高版本中修复了该漏洞,请受影响的用户升级至安全版本:</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">https://www.kernel.org/</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【参考链接】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">https://github.com/Markakd/CVE-2022-2588</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;">&nbsp;</p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">https://access.redhat.com/security/cve/cve-2022-2588</span></p>
</div>
</div>
</div>
<a class="static-back" href="../announce.html">返回列表</a></article></main><footer class="section footer index">
<div class="section-content section-p">
<div class="footer-content">
<div class="footer-nav">
<div class="footer-logo">
<img src="../../assets/f47e84e194e9c4-c47cdbdba8c01d82740fc430f77aaa6f1792437534-222.png" alt="">
</div>
<div class="footer-nav-left">
<div class="footer-nav-box">
<div class="footer-nav-head">产品中心</div>
<div class="footer-nav-cont">
<div class="footer-nav-item"><a class="link-hover" href="../cloud.html">云服务器</a></div>
<div class="footer-nav-item"><a class="link-hover" href="../dedicated.html">独立服务器</a></div>
<div class="footer-nav-item"><a class="link-hover" href="../balance.html">负载均衡</a></div>
<div class="footer-nav-item"><a class="link-hover" href="../box.html">Box服务器</a></div>
</div>
</div>
<div class="footer-nav-box">
<div class="footer-nav-head">技术支持</div>
<div class="footer-nav-cont">
<div class="footer-nav-item"><a class="link-hover" href="../document.html">技术文档</a></div>
</div>
</div>
<div class="footer-nav-box">
<div class="footer-nav-head">关于我们</div>
<div class="footer-nav-cont">
<div class="footer-nav-item"><a class="link-hover" href="../about.html">公司简介</a></div>
<div class="footer-nav-item"><a class="link-hover" href="../contact.html">联系我们</a></div>
</div>
</div>
</div>
<div class="footer-nav-right">
<div class="footer-nav-box">
<div class="footer-nav-head">联系我们</div>
<div class="footer-nav-cont">
<div class="footer-nav-item">JSKCloud.net</div>
<div class="footer-nav-item mt-20">+1 971-555-4977</div>
<div class="footer-nav-item"> </div>
</div>
<div class="qr-code"><img src="../../assets/d3e969edecf0fd-eac95f7d7c0bee0ac3a76bca7132331742548017-photo_2025-03-21_17-06-47.jpg" alt=""></div>
</div>
</div>
</div>
<div class="footer-record">
<div class="left-info">
<a href="../index.html" rel="nofollow"> Copyright@2017-2024 JSK cloud TECHNOLOGY PTE. LTD 版权所有 All Rights Reserved</a>
<a href="../index.html" rel="nofollow"> </a>
<span> </span>
</div>
<span> </span>
</div>
</div>
</div>
</footer><script src="../../assets/site.js" defer=""></script></body></html>