CVE:CVE-2013-1943
CNNVD:CNNVD-201306-343
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 2.6.39.4及之前的版本存在输入验证错误漏洞，该漏洞源于程序检查有效的用户空间内存缺少kvm_set_memory_region()函数。本地攻击者可借助特制的应用程序利用该漏洞获得特权或获得来自内核内存的敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 3.0,and avoid the version (,3.0); Upgrade redhat enterprise_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.2,6.3,and avoid the version 6.2,6.3; Upgrade canonical ubuntu_linux to a higher version than 10.04,and avoid the version 10.04