CVE:CVE-2010-3078
CNNVD:CNNVD-201009-216
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 2.6.36-rc4之前版本存在信息泄露漏洞，该漏洞源于fs_ioc_fsgetxattr函数没有初始化某个结构体成员。本地攻击者利用该漏洞获得潜在的敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 2.6.35.4,2.6.36,2.6.36:rc1,2.6.36:rc2,2.6.36:rc3,and avoid the version (,2.6.35.4],2.6.36,2.6.36:rc1,2.6.36:rc2,2.6.36:rc3; Upgrade opensuse opensuse to a higher version than 11.1,11.3,and avoid the version 11.1,11.3; Upgrade suse suse_linux_enterprise_desktop to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse suse_linux_enterprise_server to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,9.04,9.10,10.04,10.10,and avoid the version 6.06,8.04,9.04,9.10,10.04,10.10; Upgrade vmware esx to a higher version than 4.0,4.1,and avoid the version 4.0,4.1