CVE:CVE-2010-2943
CNNVD:CNNVD-201009-295
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在信息泄露漏洞，Linux kernel 2.6.35之前版本中的xfs实现在读取索引节点缓冲区之前没有查看索引节点分配的btrees。远程认证用户可以通过访问陈旧的NFS文件句柄读取解除链接的文件，读取或覆盖磁盘块，这些磁盘块分配给当前被使用的文件而不是分配给之前被解除引用的文件。
solution:Upgrade linux linux_kernel to a higher version than 2.6.35,and avoid the version (,2.6.35); Upgrade canonical ubuntu_linux to a higher version than 6.06,9.10,10.04,10.10,and avoid the version 6.06,9.10,10.04,10.10; Upgrade vmware esx to a higher version than 4.0,4.1,and avoid the version 4.0,4.1; Upgrade avaya aura_communication_manager to a higher version than 5.2,and avoid the version 5.2; Upgrade avaya aura_presence_services to a higher version than 6.0,6.1,6.1.1,and avoid the version 6.0,6.1,6.1.1; Upgrade avaya aura_session_manager to a higher version than 1.1,5.2,6.0,and avoid the version 1.1,5.2,6.0; Upgrade avaya aura_system_manager to a higher version than 5.2,6.0,6.1,6.1.1,and avoid the version 5.2,6.0,6.1,6.1.1; Upgrade avaya aura_system_platform to a higher version than 1.1,6.0,6.0:sp1,and avoid the version 1.1,6.0,6.0:sp1; Upgrade avaya aura_voice_portal to a higher version than 5.0,5.1,5.1:sp1,and avoid the version 5.0,5.1,5.1:sp1; Upgrade avaya iq to a higher version than 5.0,5.1,and avoid the version 5.0,5.1