linux linux kernel 2.6.27.25 vulnerabilities and exploits

(subscribe to this query)

Race condition in the mac80211 subsystem in the Linux kernel prior to 2.6.32-rc8-next-20091201 allows remote malicious users to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation...

The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel prior to 2.6.32-rc7 allows malicious users to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.

Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kernel prior to 2.6.31.2 allows local users to cause a denial of service (OOPS) via a crafted optlen value in an SO_BINDTODEVICE operation.

The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel prior to 2.6.32-git6 allows user-assisted remote malicious users to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG gro...

The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel prior to 2.6.32 allows user-assisted remote malicious users to cause a denial of service (NULL pointer dereference), and possibly have unspecified other impact, via a crafted read-only fi...

The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel prior to 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer d...

The do_mmap_pgoff function in mm/nommu.c in the Linux kernel prior to 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.

1 EDB exploit

Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel prior to 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.

The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel prior to 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote malicious users to cause a denial of ser...

The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel prior to 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via...

« PREV 1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook