CVE:CVE-2007-2172
CNNVD:CNNVD-200704-393
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux Kernel代码实现上存在漏洞，本地攻击可能利用此漏洞对系统造成拒绝服务。
Linux内核代码中存在一个错误，将RTA_MAX而不是RTN_MAX错误地用做了数组的大小，导致dn_fib_props(dn_fib.c，DECNet)和fib_props(fib_semantics.c，IPv4)函数中可能出现越界访问的情况，造成内核崩溃。
solution:Upgrade linux linux_kernel to a higher version than 2.4.35,2.6.20,2.6.21:git1,2.6.21:git2,2.6.21:git3,2.6.21:git4,2.6.21:git5,2.6.21:git6,2.6.21:git7,2.6.21:rc1,2.6.21:rc2,2.6.21:rc3,2.6.21:rc4,2.6.21:rc5,and avoid the version [2.4.0,2.4.35),[2.6.0,2.6.20],2.6.21:git1,2.6.21:git2,2.6.21:git3,2.6.21:git4,2.6.21:git5,2.6.21:git6,2.6.21:git7,2.6.21:rc1,2.6.21:rc2,2.6.21:rc3,2.6.21:rc4,2.6.21:rc5; Upgrade debian debian_linux to a higher version than 3.1,4.0,and avoid the version 3.1,4.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,6.10,7.04,and avoid the version 6.06,6.10,7.04