Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux linux kernel 2.6.25.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-2372
The Linux kernel 2.6.24 and 2.6.25 prior to 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages...
Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.25.3Linux Linux Kernel 2.6.24Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.25.1Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.25.2Linux Linux Kernel 2.6.25.7Linux Linux Kernel 2.6.25.6
NA
CVE-2008-3247
The LDT implementation in the Linux kernel 2.6.25.x prior to 2.6.25.11 on x86_64 platforms uses an incorrect size for ldt_desc, which allows local users to cause a denial of service (system crash) or possibly gain privileges via unspecified vectors.
Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.25.12Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.25.6Linux Linux Kernel 2.6.25.7Linux Linux Kernel 2.6.25.2Linux Linux Kernel 2.6.25.1Linux Linux Kernel 2.6.25.3Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.25.10
NA
CVE-2009-0835
The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and previous versions on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process ma...
Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.25.10Linux Linux Kernel 2.6.25.3Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.25.6Linux Linux Kernel 2.6.25.12Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.25.1Linux Linux Kernel 2.6.25.2Linux Linux Kernel 2.6.25.7Linux Linux Kernel 2.6.25.8
NA
CVE-2008-5033
The chip_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x prior to 2.6.25.19, 2.6.26.x prior to 2.6.26.7, and 2.6.27.x prior to 2.6.27.3 allows malicious users to cause a denial of service (NULL function pointer dereference and OOPS) via unknown vect...
Linux Linux Kernel 2.6.27.1Linux Linux Kernel 2.6.26.5Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.25.18Linux Linux Kernel 2.6.26.6Linux Linux Kernel 2.6.26Linux Linux Kernel 2.6.26.3Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.27Linux Linux Kernel 2.6.25.13Linux Linux Kernel 2.6.25.3Linux Linux Kernel 2.6.26.2Linux Linux Kernel 2.6.25.15Linux Linux Kernel 2.6.26.1Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.25.16Linux Linux Kernel 2.6.25.17Linux Linux Kernel 2.6.25.10Linux Linux Kernel 2.6.25.1Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.27.2
NA
CVE-2008-3526
Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 up to and including 2.6.26.3 allows remote malicious users to cause a denial of service (panic) or possi...
Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.24.2Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.24Linux Linux Kernel 2.6.24.1Linux Linux Kernel 2.6.26Linux Linux Kernel 2.6.26.3Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.25.13Linux Linux Kernel 2.6.25.3Linux Linux Kernel 2.6.26.2Linux Linux Kernel 2.6.25.15Linux Linux Kernel 2.6.24 Rc4Linux Linux Kernel 2.6.26.1Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.24.4Linux Linux Kernel 2.6.24.5Linux Linux Kernel 2.6.24 Rc1Linux Linux Kernel 2.6.25.10Linux Linux Kernel 2.6.25.1Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.24.6
NA
CVE-2008-3915
Buffer overflow in nfsd in the Linux kernel prior to 2.6.26.4, when NFSv4 is enabled, allows remote malicious users to have an unknown impact via vectors related to decoding an NFSv4 acl.
Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.24.2Linux Linux Kernel 2.6.22.21Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23.8Linux Linux Kernel 2.6.22.12Linux Linux Kernel 2.6.21.6Linux Linux Kernel 2.6.23.16Linux Linux Kernel 2.6.24.1Linux Linux Kernel 2.6.22Linux Linux Kernel 2.6.20.16Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.19.4Linux Linux Kernel 2.6.25.13Linux Linux Kernel 2.6.20.21Linux Linux Kernel 2.6.25.3Linux Linux Kernel 2.6.24Linux Linux Kernel 2.6.20.17Linux Linux Kernel 2.6.21.5Linux Linux Kernel 2.6.25.15
NA
CVE-2008-4554
The do_splice_from function in fs/splice.c in the Linux kernel prior to 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.
Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.26Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.24.2Linux Linux Kernel 2.4.36.6Linux Linux Kernel 2.6.22.21Linux Linux Kernel 2.6.25.12Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23.8Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.22.12Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.21.6Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.6.22.1Linux Linux Kernel 2.6.23.16Linux Linux Kernel 2.6.24.1
NA
CVE-2008-4307
Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel prior to 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race betwee...
Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.24.2Linux Linux Kernel 2.4.36.6Linux Linux Kernel 2.6.22.21Linux Linux Kernel 2.6.25.12Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23.8Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.22.12Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.21.6Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.6.22.1Linux Linux Kernel 2.6.23.16Linux Linux Kernel 2.6.24.1Linux Linux Kernel 2.6.25.6
NA
CVE-2008-4576
sctp in Linux kernel prior to 2.6.25.18 allows remote malicious users to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init t...
Linux Linux Kernel 2.6.23.11Linux Linux Kernel 2.6.23.9Linux Linux Kernel 2.6.20.18Linux Linux Kernel 2.6.20.17Linux Linux Kernel 2.6.20.20Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23 Rc1Linux Linux Kernel 2.4.36Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.21.7Linux Linux Kernel 2.6.23.10Linux Linux Kernel 2.6.24 Rc1Linux Linux Kernel 2.6.24Linux Linux Kernel 2.6.25.10Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.23.12Linux Linux Kernel 2.6.20.19Linux Linux Kernel 2.6.19.7Linux Linux Kernel 2.6.24 Rc4Linux Linux Kernel 2.6.24 Rc5
NA
CVE-2008-4113
The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel prior to 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel ...
Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.24.2Linux Linux Kernel 2.4.36.6Linux Linux Kernel 2.6.22.21Linux Linux Kernel 2.6.25.12Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23.8Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.22.12Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.21.6Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.6.23.16Linux Linux Kernel 2.6.24.1Linux Linux Kernel 2.6.25.6Linux Linux Kernel 2.6.22
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook