CVE:CVE-2010-2959
CNNVD:CNNVD-201009-052
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 2.6.27.53之前的版本，2.6.32.21之前的2.6.32.x版本， 2.6.34.6之前的2.6.34.x版本以及2.6.35.4之前的2.6.35.x版本中的Controller Area Network(CAN)功能中的net/can/bcm.c函数中存在整数溢出漏洞。攻击者可以借助特制的CAN通讯执行任意代码或者导致拒绝服务（系统崩溃）。
solution:Upgrade linux linux_kernel to a higher version than 2.6.27.53,2.6.32.21,2.6.34.6,2.6.35.4,and avoid the version (,2.6.27.53),[2.6.32,2.6.32.21),[2.6.34,2.6.34.6),[2.6.35,2.6.35.4); Upgrade fedoraproject fedora to a higher version than 12,and avoid the version 12; Upgrade debian debian_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade opensuse opensuse to a higher version than 11.3,and avoid the version 11.3; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_high_availability_extension to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_real_time to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_server to a higher version than 11:sp1,and avoid the version 11:sp1