CVE:CVE-2012-1097
CNNVD:CNNVD-201203-484
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.2.10之前版本中的regset(也称register设置)功能中存在漏洞，该漏洞源于未正确处理.get和.set方法的缺失。本地用户可利用该漏洞借助(1)PTRACE_GETREGSET或者(2) PTRACE_SETREGSET ptrace的调用导致拒绝服务（空指针解引用）或者产生其他未明影响。
solution:Upgrade linux linux_kernel to a higher version than 3.0.24,3.2.10,and avoid the version (,3.0.24),[3.1,3.2.10); Upgrade redhat enterprise_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp1,11:sp2,and avoid the version 11:sp1,11:sp2; Upgrade suse linux_enterprise_high_availability_extension to a higher version than 11:sp1,11:sp2,and avoid the version 11:sp1,11:sp2; Upgrade suse linux_enterprise_server to a higher version than 11:sp1,11:sp2,and avoid the version 11:sp1,11:sp2