vegard nossum vulnerabilities and exploits

(subscribe to this query)

The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 prior to 2.6.27.19 and 2.6.28 prior to 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.

1 EDB exploit

The ext4_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 prior to 2.6.27.19 and 2.6.28 prior to 2.6.28.7 uses the i_size_high structure member during operations on arbitrary types of files, which allows local users to cause a denial of service (CPU consumption and err...

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 prior to 2.6.27.19 and 2.6.28 prior to 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mo...

The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel prior to 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, relate...

The sock_getsockopt function in net/core/sock.c in the Linux kernel prior to 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.

1 EDB exploit

The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 prior to 2.6.27.19 and 2.6.28 prior to 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS...

The ABI in the Linux kernel 2.6.28 and previous versions on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users t...

Linux Linux Kernel Debian Debian Linux 5.0 Debian Debian Linux 4.0

1 Github repository

Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and previous versions allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."

Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel prior to 2.6.28-git8 allows remote malicious users to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.

1 EDB exploit

fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel prior to 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return...

Linux Linux Kernel Opensuse Opensuse 11.1 Opensuse Opensuse 11.0 Opensuse Opensuse 10.3 Debian Debian Linux 5.0 Debian Debian Linux 4.0 Canonical Ubuntu Linux 7.10 Canonical Ubuntu Linux 8.10 Canonical Ubuntu Linux 8.04

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook