CVE:CVE-2014-1739
CNNVD:CNNVD-201406-525
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.14.5及之前版本的drivers/media/media-device.c文件中的‘media_device_enum_entities’函数存在安全漏洞，该漏洞源于程序没有初始化化数据结构。本地攻击者可提高在MEDIA_IOC_ENUM_ENTITIES ioctl调用期间，借助/dev/media0设备文件的读访问权限利用该漏洞获取内核内存中的敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 3.14.6,and avoid the version (,3.14.6); Upgrade canonical ubuntu_linux to a higher version than 12.04,13.10,and avoid the version 12.04,13.10; Upgrade suse linux_enterprise_high_availability_extension to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse suse_linux_enterprise_desktop to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse suse_linux_enterprise_server to a higher version than 11:sp3,and avoid the version 11:sp3