CVE:CVE-2011-0711
CNNVD:CNNVD-201103-010
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 2.6.38-rc6-git3之前版本的fs/xfs/xfs_fsops.c文件中的xfs_fs_geometry函数没有初始化某个结构体成员。本地用户可以借助FSGEOMETRY_V1 ioctl调用从内核栈内存中获取敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 2.6.38,2.6.38,2.6.38:rc1,2.6.38:rc2,2.6.38:rc3,2.6.38:rc4,2.6.38:rc5,and avoid the version (,2.6.38),2.6.38,2.6.38:rc1,2.6.38:rc2,2.6.38:rc3,2.6.38:rc4,2.6.38:rc5; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_server to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 5.6,and avoid the version 5.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 5.6,and avoid the version 5.6; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,and avoid the version 5.0