CVE:CVE-2014-8134
CNNVD:CNNVD-201412-330
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.18及之前版本的arch/x86/kernel/kvm.c文件中的‘paravirt_ops_setup’函数存在安全漏洞，该漏洞源于程序对KVM虚拟机内核使用不正确的paravirt_enabled设置。攻击者可借助特制的应用程序利用该漏洞绕过ASLR保护机制。
solution:Upgrade linux linux_kernel to a higher version than 3.18,and avoid the version (,3.18]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,and avoid the version 12.04,14.04,16.04; Upgrade opensuse evergreen to a higher version than 11.4,and avoid the version 11.4; Upgrade opensuse opensuse to a higher version than 13.1,and avoid the version 13.1; Upgrade suse suse_linux_enterprise_server to a higher version than 11:sp2,and avoid the version 11:sp2; Upgrade oracle linux to a higher version than 6,and avoid the version 6