Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux linux kernel 2.6.28 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-5300
Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-20...
Linux Linux Kernel 2.6.28
NA
CVE-2008-5701
Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel prior to 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service (system crash) via an o32 syscall with a small syscall number, which leads to an attempted read operation outside t...
Linux Linux Kernel 2.6.28Linux Linux KernelDebian Debian Linux 4.0
NA
CVE-2009-1046
The console selection feature in the Linux kernel 2.6.28 prior to 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate malicious users to cause a denial of service (memory corruption) by selecting a small number of 3-byte UT...
Linux Linux Kernel 2.6.28Linux Linux Kernel 2.6.28.1Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.28.3Linux Linux Kernel 2.6.25
NA
CVE-2009-0787
The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 prior to 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions...
Linux Linux Kernel 2.6.28.4Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.28.5Linux Linux Kernel 2.6.28.8Linux Linux Kernel 2.6.28.3Linux Linux Kernel 2.6.28.6Linux Linux Kernel 2.6.28.7Linux Linux Kernel 2.6.28.1Linux Linux Kernel 2.6.28
NA
CVE-2011-4324
The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel prior to 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem.
Linux Linux KernelLinux Linux Kernel 2.6.28.4Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.28.5Linux Linux Kernel 2.6.28.8Linux Linux Kernel 2.6.28.3Linux Linux Kernel 2.6.28.9Linux Linux Kernel 2.6.28.6Linux Linux Kernel 2.6.28.7Linux Linux Kernel 2.6.28.1Linux Linux Kernel 2.6.28
NA
CVE-2011-4348
Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel prior to 2.6.29 allows remote malicious users to cause a denial of service (system hang) via SCTP packets. NOTE: in some environments, this issue exists because of an incomplete fix for CVE-2011-2482.
Linux Linux KernelLinux Linux Kernel 2.6.28.4Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.28.5Linux Linux Kernel 2.6.28.8Linux Linux Kernel 2.6.28.3Linux Linux Kernel 2.6.28.9Linux Linux Kernel 2.6.28.6Linux Linux Kernel 2.6.28.7Linux Linux Kernel 2.6.28.1Linux Linux Kernel 2.6.28
NA
CVE-2009-3288
The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 up to and including 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by u...
Linux Linux Kernel 2.6.31-rc2Linux Linux Kernel 2.6.31-rc3Linux Linux Kernel 2.6.31-rc4Linux Linux Kernel 2.6.31-rc5Linux Linux Kernel 2.6.31-rc6Kernel Linux Kernel 2.6.28-rc1Linux Linux Kernel 2.6.31-rc9Linux Linux Kernel 2.6.31-rc10Linux Linux Kernel 2.6.31-rc7Linux Linux Kernel 2.6.31-rc8
NA
CVE-2009-4141
Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel prior to 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file.
Linux Linux Kernel 2.6.11Linux Linux Kernel 2.6.23.4Linux Linux Kernel 2.6.16.16Linux Linux Kernel 2.6.18.7Linux Linux Kernel 2.6.17.12Linux Linux Kernel 2.6.16.9Linux Linux Kernel 2.6.17.9Linux Linux Kernel 2.6.11.2Linux Linux Kernel 2.6.5Linux Linux Kernel 2.6.15.3Linux Linux Kernel 2.6.11.10Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.16.6Linux Linux Kernel 2.6.16.8Linux Linux Kernel 2.6.22.4Linux Linux Kernel 2.6.14.7Linux Linux Kernel 2.6.13Linux Linux Kernel 2.6.17.2Linux Linux Kernel 2.6.13.3Linux Linux KernelLinux Linux Kernel 2.6.11.8Linux Linux Kernel 2.6.23.7
NA
CVE-2009-0745
The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 prior to 2.6.27.19 and 2.6.28 prior to 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS...
Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.27.3Linux Linux Kernel 2.6.27.1Linux Linux Kernel 2.6.27.18Linux Linux Kernel 2.6.27.10Linux Linux Kernel 2.6.27.17Linux Linux Kernel 2.6.28.4Linux Linux Kernel 2.6.27.16Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.27.4Linux Linux Kernel 2.6.27Linux Linux Kernel 2.6.28.5Linux Linux Kernel 2.6.27.13Linux Linux Kernel 2.6.27.15Linux Linux Kernel 2.6.27.8Linux Linux Kernel 2.6.27.9Linux Linux Kernel 2.6.28.3Linux Linux Kernel 2.6.27.5Linux Linux Kernel 2.6.27.7Linux Linux Kernel 2.6.28.6Linux Linux Kernel 2.6.27.2Linux Linux Kernel 2.6.27.11
NA
CVE-2009-0746
The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 prior to 2.6.27.19 and 2.6.28 prior to 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.
Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.27.3Linux Linux Kernel 2.6.27.1Linux Linux Kernel 2.6.27.18Linux Linux Kernel 2.6.27.10Linux Linux Kernel 2.6.27.17Linux Linux Kernel 2.6.28.4Linux Linux Kernel 2.6.27.16Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.27.4Linux Linux Kernel 2.6.27Linux Linux Kernel 2.6.28.5Linux Linux Kernel 2.6.27.13Linux Linux Kernel 2.6.27.15Linux Linux Kernel 2.6.27.8Linux Linux Kernel 2.6.27.9Linux Linux Kernel 2.6.28.3Linux Linux Kernel 2.6.27.5Linux Linux Kernel 2.6.27.7Linux Linux Kernel 2.6.28.6Linux Linux Kernel 2.6.27.2Linux Linux Kernel 2.6.27.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook