CVE:CVE-2011-1163
CNNVD:CNNVD-201104-054
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 2.6.38之前版本的fs/partitions/osf.c中的osf_partition函数没有正确处理无效数量的分区。本地用户可借助涉及partition-table解析的向量，从内核堆内存中获取潜在敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 2.6.38,and avoid the version (,2.6.38); Upgrade suse linux_enterprise_server to a higher version than 10:sp4,and avoid the version 10:sp4; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 5.6,and avoid the version 5.6; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 5.6,and avoid the version 5.6; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0