linux linux kernel 2.6.27.21 vulnerabilities and exploits

(subscribe to this query)

The robust futex implementation in the Linux kernel prior to 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.

The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel prior to 2.6.27.22, and 2.6.28.x prior to 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows loca...

Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions prior to 2.6.30-rc1, might allow remote malicious users to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.

Linux kernel 2.6.18 up to and including 2.6.33, and possibly other versions, allows remote malicious users to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/...

mm/shmem.c in the Linux kernel prior to 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows malicious users to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecifie...

The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel prior to 2.6.29 on the sparc64 platform allows local users to cause a denial of service (system crash) by reading the /proc/iomem file, related to uninitialized pointers and the request_r...

1 EDB exploit

Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel prior to 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCr...

The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel prior to 2.6.32-rc7 allows malicious users to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel prior to 2.6.32-rc7 might allow malicious users to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook