CVE:CVE-2014-3153
CNNVD:CNNVD-201406-095
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.14.5及之前版本的kernel/futex.c文件中的‘futex_requeue’函数存在安全漏洞，该漏洞源于程序没有正确处理futex系统调用。本地攻击者可借助特制的FUTEX_REQUEUE命令利用该漏洞获取特权。
solution:Upgrade linux linux_kernel to a higher version than 3.14.5,and avoid the version (,3.14.5]; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.2,and avoid the version 6.2; Upgrade opensuse opensuse to a higher version than 11.4,and avoid the version 11.4; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_high_availability_extension to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_real_time_extension to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11,11:sp2,11:sp3,and avoid the version 11,11:sp2,11:sp3