CVE:CVE-2014-7145
CNNVD:CNNVD-201409-1070
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.16.3之前版本的fs/cifs/smb2pdu.c文件中‘SMB2_tcon’函数存在安全漏洞，该漏洞源于程序处理DFS引用时删除了IPC$共享。攻击者可利用该漏洞造成拒绝服务（空指针逆向引用和客户端系统崩溃）。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade linux linux_kernel to a higher version than 3.10.55,3.12.29,3.14.19,3.16.3,and avoid the version [3.6,3.10.55),[3.11,3.12.29),[3.13,3.14.19),[3.15,3.16.3); Upgrade canonical ubuntu_linux to a higher version than 12.04,and avoid the version 12.04