CVE:CVE-2008-3275
CNNVD:CNNVD-200808-175
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 2.6.25.15之前版本中的vfs实现存在资源管理错误漏洞，该漏洞源于fs/namei.c文件的‘real_lookup’函数和‘__lookup_hash’函数没有阻止为已删除的目录创建子目录项。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 2.6.25.15,and avoid the version (,2.6.25.15); Upgrade debian debian_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,7.04,7.10,8.04,and avoid the version 6.06,7.04,7.10,8.04; Upgrade suse suse_linux_enterprise_desktop to a higher version than 10:sp1,and avoid the version 10:sp1; Upgrade suse suse_linux_enterprise_server to a higher version than 10:sp1,and avoid the version 10:sp1