CVE:CVE-2016-3672
CNNVD:CNNVD-201604-092
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 4.5.2及之前版本的arch/x86/mm/mmap.c文件中的‘arch_pick_mmap_layout’函数存在安全漏洞，该漏洞源于程序没有正确随机化已有的基址。本地攻击者可通过禁用stack-consumption资源限制，利用该漏洞破坏ADDR_NO_RANDOMIZE标志上既定的限制，绕过setuid或setgid程序的ASLR保护机制。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,and avoid the version 12.04,14.04,15.10; Upgrade novell suse_linux_enterprise_desktop to a higher version than 12.0,and avoid the version 12.0; Upgrade novell suse_linux_enterprise_live_patching to a higher version than 12.0,and avoid the version 12.0; Upgrade novell suse_linux_enterprise_module_for_public_cloud to a higher version than 12.0,and avoid the version 12.0; Upgrade novell suse_linux_enterprise_real_time_extension to a higher version than 12.0:sp1,and avoid the version 12.0:sp1; Upgrade novell suse_linux_enterprise_server to a higher version than 12.0,and avoid the version 12.0; Upgrade novell suse_linux_enterprise_software_development_kit to a higher version than 12.0,and avoid the version 12.0; Upgrade novell suse_linux_enterprise_workstation_extension to a higher version than 12.0,and avoid the version 12.0; Upgrade linux linux_kernel to a higher version than 4.5.2,and avoid the version (,4.5.2]