CVE:CVE-2010-3080
CNNVD:CNNVD-201009-217
Linux Kernel是开源操作系统Linux所使用的内核。
Linux kernel 2.6.36-rc4之前版本中的sound/core/seq/oss/seq_oss_init.c文件中的snd_seq_oss_open函数中存在双重释放漏洞。本地用户可以借助打开/dev/sequencer设备的不成功尝试导致拒绝服务或者可能引起其他未明影响。
solution:Upgrade linux linux_kernel to a higher version than 2.6.36,2.6.36,2.6.36:rc1,2.6.36:rc2,2.6.36:rc3,and avoid the version (,2.6.36),2.6.36,2.6.36:rc1,2.6.36:rc2,2.6.36:rc3; Upgrade opensuse opensuse to a higher version than 11.1,and avoid the version 11.1; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_real_time_extension to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_server to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,9.04,9.10,10.04,10.10,and avoid the version 6.06,8.04,9.04,9.10,10.04,10.10