CVE:CVE-2014-9322
CNNVD:CNNVD-201412-373
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.17.5之前版本的arch/x86/kernel/entry_64.S文件中存在安全漏洞，该漏洞源于程序没有正确处理与Stack Segment(SS)段寄存器相关的错误。本地攻击者可借助IRET指令利用该漏洞获取权限。
solution:Upgrade linux linux_kernel to a higher version than 3.2.65,3.4.106,3.10.62,3.12.35,3.14.26,3.16.35,3.17.5,and avoid the version (,3.2.65),[3.3,3.4.106),[3.5,3.10.62),[3.11,3.12.35),[3.13,3.14.26),[3.15,3.16.35),[3.17,3.17.5); Upgrade redhat enterprise_linux_eus to a higher version than 5.6,and avoid the version 5.6; Upgrade canonical ubuntu_linux to a higher version than 10.04,and avoid the version 10.04; Upgrade opensuse evergreen to a higher version than 11.4,and avoid the version 11.4; Upgrade suse suse_linux_enterprise_server to a higher version than 10:sp4,and avoid the version 10:sp4; Upgrade google android to a higher version than 6.0,6.0.1,and avoid the version 6.0,6.0.1