linux linux kernel 2.6.31 vulnerabilities and exploits

(subscribe to this query)

The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel prior to 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigg...

1 EDB exploit

The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions prior to 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote malicious users to cause a denial of service (NULL pointer dereference and han...

arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel 2.6.30 and other versions prior to 2.6.33, when running on PowerPC, does not properly perform a security check for access to a kernel page, which allows local users to overwrite arbitrary kernel memory, related to Fsl bo...

The NFS implementation in Linux kernel prior to 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows local users to cause a denial of service (NULL pointer dereference and O_DIRECT oops), as demonstrated using diotest4 from LTP.

The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x prior to 2.4.37.6 and 2.6.x prior to 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive inform...

Linux Linux Kernel 2.6.31 Linux Linux Kernel Canonical Ubuntu Linux 9.04 Canonical Ubuntu Linux 8.10 Canonical Ubuntu Linux 9.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 6.06 Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Eus 5.4

The init_posix_timers function in kernel/posix-timers.c in the Linux kernel prior to 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.

1 EDB exploit

cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions prior to 2.6.31-rc6 allows remote malicious users to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent fr...

Linux kernel 2.6.18 up to and including 2.6.33, and possibly other versions, allows remote malicious users to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/...

The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel prior to 2.6.32-rc7 allows malicious users to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.

« PREV 1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook