linux linux kernel 2.6.31-rc6 vulnerabilities and exploits

(subscribe to this query)

The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 up to and including 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by u...

Linux Linux Kernel 2.6.31-rc2 Linux Linux Kernel 2.6.31-rc3 Linux Linux Kernel 2.6.31-rc4 Linux Linux Kernel 2.6.31-rc5 Linux Linux Kernel 2.6.31-rc6 Kernel Linux Kernel 2.6.28-rc1 Linux Linux Kernel 2.6.31-rc9 Linux Linux Kernel 2.6.31-rc10 Linux Linux Kernel 2.6.31-rc7 Linux Linux Kernel 2.6.31-rc8

The NFS implementation in Linux kernel prior to 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows local users to cause a denial of service (NULL pointer dereference and O_DIRECT oops), as demonstrated using diotest4 from LTP.

The init_posix_timers function in kernel/posix-timers.c in the Linux kernel prior to 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.

1 EDB exploit

cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions prior to 2.6.31-rc6 allows remote malicious users to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent fr...

The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel prior to 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat...

Linux Linux Kernel 2.6.31 Linux Linux Kernel

The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel prior to 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and cause...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook