CVE:CVE-2016-4805
CNNVD:CNNVD-201605-414
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 4.5.2之前版本的drivers/net/ppp/ppp_generic.c文件中存在释放后重用漏洞。本地攻击者可通过删除网络命名空间利用该漏洞造成拒绝服务（内存损坏和系统崩溃或自旋锁）。
solution:Upgrade novell suse_linux_enterprise_desktop to a higher version than 12.0,12.0:sp1,and avoid the version 12.0,12.0:sp1; Upgrade novell suse_linux_enterprise_workstation_extension to a higher version than 12.0,12.0:sp1,and avoid the version 12.0,12.0:sp1; Upgrade novell suse_linux_enterprise_module_for_public_cloud to a higher version than 12.0,and avoid the version 12.0; Upgrade novell suse_linux_enterprise_server to a higher version than 11.0:sp4,12.0,12.0:sp1,and avoid the version 11.0:sp4,12.0,12.0:sp1; Upgrade novell opensuse_leap to a higher version than 42.1,and avoid the version 42.1; Upgrade novell suse_linux_enterprise_software_development_kit to a higher version than 11.0:sp4,12.0,12.0:sp1,and avoid the version 11.0:sp4,12.0,12.0:sp1; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,and avoid the version 12.04; Upgrade linux linux_kernel to a higher version than 3.2.80,3.10.102,3.12.59,3.14.67,3.16.35,3.18.37,4.1.28,4.4.8,4.5.2,and avoid the version [2.6.30,3.2.80),[3.3,3.10.102),[3.11,3.12.59),[3.13,3.14.67),[3.15,3.16.35),[3.17,3.18.37),[3.19,4.1.28),[4.2,4.4.8),[4.5,4.5.2); Upgrade oracle linux to a higher version than 6,and avoid the version 6; Upgrade novell suse_linux_enterprise_real_time_extension to a higher version than 11.0:sp4,12.0:sp1,and avoid the version 11.0:sp4,12.0:sp1; Upgrade novell suse_linux_enterprise_live_patching to a higher version than 12.0,and avoid the version 12.0