CVE:CVE-2009-3621
CNNVD:CNNVD-200910-316
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 2.6.31.4版本及其早期版本的net/unix/af_unix.c文件中存在资源管理错误漏洞。本地用户通过创建一个abstract-namespace AF_UNIX listening socket，同时执行一个在该socket上的关闭操作和对该其的连接操作，来造成拒绝服务(系统挂起)。
solution:Upgrade linux linux_kernel to a higher version than 2.6.31.4,and avoid the version (,2.6.31.4]; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,8.10,9.04,9.10,and avoid the version 6.06,8.04,8.10,9.04,9.10; Upgrade fedoraproject fedora to a higher version than 10,and avoid the version 10; Upgrade opensuse opensuse to a higher version than 11.0,11.2,and avoid the version 11.0,11.2; Upgrade suse suse_linux_enterprise_desktop to a higher version than 10:sp2,10:sp3,and avoid the version 10:sp2,10:sp3; Upgrade suse suse_linux_enterprise_server to a higher version than 10:sp2,10:sp3,and avoid the version 10:sp2,10:sp3; Upgrade vmware vma to a higher version than 4.0,and avoid the version 4.0; Upgrade vmware esx to a higher version than 4.0,and avoid the version 4.0