linux linux kernel 2.6.25 vulnerabilities and exploits

(subscribe to this query)

Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and previous versions allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."

net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and previous versions allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of ...

1 EDB exploit

Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel prior to 2.6.28-rc1 allows malicious users to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, relat...

Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel prior to 2.6.28-rc1 allows malicious users to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, ...

Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel prior to 2.6.28-git8 allows remote malicious users to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.

1 EDB exploit

The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel prior to 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows malicious users to cause a denial of service (panic) via unspecified vectors, ...

libata in the Linux kernel prior to 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.

The kill_something_info function in kernel/signal.c in the Linux kernel prior to 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in...

The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 prior to 2.4.36.5 and 2.6 prior to 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_...

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook