linux linux kernel 2.6.25.15 vulnerabilities and exploits

(subscribe to this query)

The chip_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x prior to 2.6.25.19, 2.6.26.x prior to 2.6.26.7, and 2.6.27.x prior to 2.6.27.3 allows malicious users to cause a denial of service (NULL function pointer dereference and OOPS) via unknown vect...

Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 up to and including 2.6.26.3 allows remote malicious users to cause a denial of service (panic) or possi...

The init_posix_timers function in kernel/posix-timers.c in the Linux kernel prior to 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.

1 EDB exploit

cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions prior to 2.6.31-rc6 allows remote malicious users to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent fr...

The do_splice_from function in fs/splice.c in the Linux kernel prior to 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.

Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel prior to 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race betwee...

sctp in Linux kernel prior to 2.6.25.18 allows remote malicious users to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init t...

The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel prior to 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel ...

1 EDB exploit

The sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel prior to 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by S...

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook