linux linux kernel 2.6.31.4 vulnerabilities and exploits

(subscribe to this query)

The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 up to and including 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive ...

1 EDB exploit

The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions prior to 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote malicious users to cause a denial of service (NULL pointer dereference and han...

arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel 2.6.30 and other versions prior to 2.6.33, when running on PowerPC, does not properly perform a security check for access to a kernel page, which allows local users to overwrite arbitrary kernel memory, related to Fsl bo...

Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel prior to 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.

Linux kernel 2.6.18 up to and including 2.6.33, and possibly other versions, allows remote malicious users to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/...

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel prior to 2.6.32-rc7 might allow malicious users to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

Race condition in the mac80211 subsystem in the Linux kernel prior to 2.6.32-rc8-next-20091201 allows remote malicious users to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation...

The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel prior to 2.6.32-rc7 allows malicious users to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook