CVE:CVE-2009-2848
CNNVD:CNNVD-200908-214
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux Kernel的execve函数没有清除current->clear_child_tid指针，在处理线程创建和退出过程中启用了CLONE_CHILD_SETTID或CLONE_CHILD_CLEARTID的clone系统调用会导致内存破坏。本地攻击者可以利用这个漏洞导致拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 2.6.29.5,2.6.30,2.6.30:rc1,2.6.30:rc2,2.6.30:rc3,2.6.30:rc4,2.6.30:rc5,2.6.30:rc6,and avoid the version (,2.6.29.5],2.6.30,2.6.30:rc1,2.6.30:rc2,2.6.30:rc3,2.6.30:rc4,2.6.30:rc5,2.6.30:rc6; Upgrade novell linux_desktop to a higher version than 9,and avoid the version 9; Upgrade opensuse opensuse to a higher version than 11.0,and avoid the version 11.0; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp2,and avoid the version 10:sp2; Upgrade suse linux_enterprise_server to a higher version than 9,10:sp2,and avoid the version 9,10:sp2; Upgrade fedoraproject fedora to a higher version than 11,and avoid the version 11; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,8.10,9.04,and avoid the version 6.06,8.04,8.10,9.04; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,5.0,and avoid the version 3.0,5.0; Upgrade redhat enterprise_linux_server to a higher version than 3.0,5.0,and avoid the version 3.0,5.0; Upgrade redhat enterprise_linux_workstation to a higher version than 3.0,5.0,and avoid the version 3.0,5.0; Upgrade vmware esx to a higher version than 4.0,and avoid the version 4.0; Upgrade vmware vma to a higher version than 4.0,and avoid the version 4.0