linux linux kernel 2.6.24 rc1 vulnerabilities and exploits

(subscribe to this query)

Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 up to and including 2.6.26.3 allows remote malicious users to cause a denial of service (panic) or possi...

Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions prior to 2.6.30-rc1, might allow remote malicious users to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.

Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel prior to 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) prior to 7.5.5 allows remote malicious users to cause a ...

The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel prior to 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensit...

Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel prior to 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCr...

The exit_notify function in kernel/exit.c in the Linux kernel prior to 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and th...

1 EDB exploit

Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 up to and including 2.6.26.2 allows remote malicious users to cause a denial of service (panic) via a crafted in...

The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel prior to 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer d...

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook