linux linux kernel 2.6.18.8 vulnerabilities and exploits

(subscribe to this query)

Linux kernel 2.6.18 up to and including 2.6.33, and possibly other versions, allows remote malicious users to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/...

The sys_remap_file_pages function in mm/fremap.c in the Linux kernel prior to 2.6.24.1 allows local users to cause a denial of service or gain privileges via unspecified vectors, related to the vm_file structure member, and the mmap_region and do_munmap functions.

The exit_notify function in kernel/exit.c in the Linux kernel prior to 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and th...

1 EDB exploit

mm/shmem.c in the Linux kernel prior to 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows malicious users to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecifie...

The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel prior to 2.6.29 on the sparc64 platform allows local users to cause a denial of service (system crash) by reading the /proc/iomem file, related to uninitialized pointers and the request_r...

1 EDB exploit

The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x prior to 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.

The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel prior to 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf ...

1 EDB exploit

Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and previous versions allows remote malicious users to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.

The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel prior to 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensit...

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook