Amazon Linux AMI : kernel / nvidia (ALAS-2013-148)

A malicious Network File System version 4 NFSv4 server could return a crafted reply to a GETACL request, causing a denial of service on the client. CVE-2012-2375 , Moderate A divide-by-zero flaw was found in the TCP Illinois congestion control algorithm implementation in the Linux kernel. If the...

Amazon Linux AMI : kernel (ALAS-2012-45)

The journalunmapbuffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the Delay and Unwritten buffer head states, which allows local users to cause a denial of service system crash by leveraging the presence of an ext4 filesystem that was mounted with ...

kernel security and bug fix update

2.6.32-358.18.1 - x86 perf/x86: Fix offcorersp valid mask for SNB/IVB Nikola Pajkovsky 971314 971315 CVE-2013-2146 - net br: fix schedule while atomic issue in brfeaturesrecompute Jiri Pirko 990464 980876 - scsi isci: Fix a race condition in the SSP task management path David Milburn 990470 97860...

Oracle Linux 6 : kernel (ELSA-2012-0571)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0571 advisory. - virt VMX: vmxsetcr0 expects kvm-srcu locked Marcelo Tosatti 808206 807507 CVE-2012-1601 - virt KVM: Ensure all vcpus are consistent with in-kernel...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2014)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-2014 advisory. kernel-uek: 2.6.32-300.25.1.el6uek - jbd2: clear BHDelay & BHUnwritten in journalunmapbuffer Eric Sandeen Bugdb: 13871 CVE-2011-4086 Tenable has extracted t...

Oracle Linux 5 : kernel (ELSA-2012-1445)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1445 advisory. - Revert: x86 mm: randomize SHLIBBASE Dave Anderson 804953 804954 CVE-2012-1568 - fs ext4: fix undefined bit shift result in ext4fillflexinfo Eric Sandeen 80968...

Oracle Linux 5 : kernel (ELSA-2012-1445-1)

From Red Hat Security Advisory 2012:1445 : Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base...

Oracle Linux 5 : kernel (ELSA-2011-1386)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1386 advisory. - Revert: xen passthrough: block VT-d MSI trap injection Paolo Bonzini 716301 716302 CVE-2011-1898 - net bridge: fix use after free in brdeliver Amerig...

Oracle Linux 5 : kernel (ELSA-2012-0150)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0150 advisory. - fs jbd2: clear BHDelay & BHUnwritten in journalunmapbuffer Eric Sandeen 783284 CVE-2011-4086 - fs epoll: workarounds to preserve kernel ABI Jason Baron 681692...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2025)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2025 advisory. - Apply new fix for CVE-2011-1576. - net: Fix memory leak/corruption on VLAN GRODROP CVE-2011-1576 - iommu-api: Extension to check for interrupt...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2048)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2048 advisory. - ext4: fix undefined behavior in ext4fillflexinfo Xi Wang orabug 16020245 CVE-2012-2100 - Divide by zero in TCP congestion control Algorithm Jespe...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2022)

Description of changes: Avoid bug caused by corrupted Ext4 filesystem. When mounting an ext4 filesystem, the kernel was not checking for zero length extents. This would cause a BUGON assertion failure in the log. NULL pointer dereference in the SCSI subsystem. A NULL dereference may occur if a SC...

Oracle Linux 5 : kernel (ELSA-2010-0610)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0610 advisory. - fs xfs: don't let swapext operate on write-only files Jiri Pirko 605160 605161 CVE-2010-2226 - fs nfs: fix bug in nfsd4 readbuf Jiri Olsa 612034 6120...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2037)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2037 advisory. - netdrv be2net: Merge fixes for CVE-2011-3347 Joe Jin Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1900-1)

Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit this flaw to cause an information leak. CVE-2012-4508 An information leak was discovered in the Linux kernel's tkill and tgkill system calls when used from compa...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-1899-1)

Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit this flaw to cause an information leak. CVE-2012-4508 An information leak was discovered in the Linux kernel's tkill and tgkill system calls when used from compa...

USN-1899-1: Linux kernel vulnerabilities

Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit this flaw to cause an information leak. CVE-2012-4508 Dave Jones discovered that the Linux kernel's socket subsystem does not correctly ensure the keepalive acti...

CentOS 5 : kernel (CESA-2010:0723)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Linux Kernel 3.0.5 - test_root() Local Denial of Service

Linux Kernel 3.0.5 - testroot Local Denial of Service / source: https://www.securityfocus.com/bid/60586/info The Linux Kernel is prone to a local denial-of-service vulnerability. Local attackers can exploit this issue to trigger an infinite loop which may cause denial-of-service conditions. / / P...

Linux Kernel 3.0.5 - 'test_root()' Local Denial of Service

/ source: https://www.securityfocus.com/bid/60586/info The Linux Kernel is prone to a local denial-of-service vulnerability. Local attackers can exploit this issue to trigger an infinite loop which may cause denial-of-service conditions. / / PoC - kernel include include include include include...