linux linux kernel 2.6.25.18 vulnerabilities and exploits

(subscribe to this query)

The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel prior to 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensit...

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel prior to 2.6.27.22 allows remote malicious users to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonst...

1 EDB exploit

The __inet6_check_established function in net/ipv6/inet6_hashtables.c in the Linux kernel prior to 2.6.29, when Network Namespace Support (aka NET_NS) is enabled, allows remote malicious users to cause a denial of service (NULL pointer dereference and system crash) via vectors in...

Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel prior to 2.6.27.5 allows remote malicious users to have an unknown impact via an "invalid beacon/probe response."

The sock_getsockopt function in net/core/sock.c in the Linux kernel prior to 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.

1 EDB exploit

The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel prior to 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows malicious users to cause a denial of service (NULL po...

1 EDB exploit

The clone system call in the Linux kernel 2.6.28 and previous versions allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.

1 EDB exploit

Stack consumption vulnerability in the do_page_fault function in arch/x86/mm/fault.c in the Linux kernel prior to 2.6.28.5 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via unspecified vectors that trigger page faults on a machine...

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel prior to 2.6.32-rc7 might allow malicious users to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

The mac80211 subsystem in the Linux kernel prior to 2.6.32-rc8-next-20091201 allows remote malicious users to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch."

« PREV 1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook