linux linux kernel 2.6.20.15 vulnerabilities and exploits

(subscribe to this query)

The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel prior to 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer d...

The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel prior to 2.6.32-git6 allows user-assisted remote malicious users to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG gro...

The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel prior to 2.6.32 allows user-assisted remote malicious users to cause a denial of service (NULL pointer dereference), and possibly have unspecified other impact, via a crafted read-only fi...

The do_mmap_pgoff function in mm/nommu.c in the Linux kernel prior to 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.

1 EDB exploit

Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel prior to 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.

The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel prior to 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote malicious users to cause a denial of ser...

arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions prior to 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference...

The icmp_send function in net/ipv4/icmp.c in the Linux kernel prior to 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable mess...

The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel prior to 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via...

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook