linux linux kernel 2.6.16.36 vulnerabilities and exploits

(subscribe to this query)

The clone system call in the Linux kernel 2.6.28 and previous versions allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.

1 EDB exploit

Stack consumption vulnerability in the do_page_fault function in arch/x86/mm/fault.c in the Linux kernel prior to 2.6.28.5 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via unspecified vectors that trigger page faults on a machine...

The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel prior to 2.6.32-rc7 allows malicious users to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel prior to 2.6.32-rc7 might allow malicious users to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

The mac80211 subsystem in the Linux kernel prior to 2.6.32-rc8-next-20091201 allows remote malicious users to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch."

Race condition in the mac80211 subsystem in the Linux kernel prior to 2.6.32-rc8-next-20091201 allows remote malicious users to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation...

The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel prior to 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.

1 EDB exploit

drivers/firewire/ohci.c in the Linux kernel prior to 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiv...

Unspecified vulnerability in the EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel 2.6.32-git6 and previous versions allows local users to cause a denial of service (filesystem corruption) via unknown vectors, a different vulnera...

The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel prior to 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, relate...

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook