linux linux kernel 2.6.25.3 vulnerabilities and exploits

(subscribe to this query)

The sock_getsockopt function in net/core/sock.c in the Linux kernel prior to 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.

1 EDB exploit

The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel prior to 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows malicious users to cause a denial of service (NULL po...

1 EDB exploit

The clone system call in the Linux kernel 2.6.28 and previous versions allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.

1 EDB exploit

Stack consumption vulnerability in the do_page_fault function in arch/x86/mm/fault.c in the Linux kernel prior to 2.6.28.5 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via unspecified vectors that trigger page faults on a machine...

The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel prior to 2.6.32-rc7 allows malicious users to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel prior to 2.6.32-rc7 might allow malicious users to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

The mac80211 subsystem in the Linux kernel prior to 2.6.32-rc8-next-20091201 allows remote malicious users to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch."

Race condition in the mac80211 subsystem in the Linux kernel prior to 2.6.32-rc8-next-20091201 allows remote malicious users to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation...

The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel prior to 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.

1 EDB exploit

drivers/firewire/ohci.c in the Linux kernel prior to 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiv...

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook