CVE-2005-3053

The syssetmempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service kernel BUG via a negative first argument...

CVE-2005-3053

The syssetmempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service kernel BUG via a negative first argument...

CVE-2005-2456

Array index overflow in the xfrmskpolicyinsert function in xfrmuser.c in Linux kernel 2.6 allows local users to cause a denial of service oops or deadlock and possibly execute arbitrary code via a p-dir value that is larger than XFRMPOLICYOUT, which is used as an index in the sock-skpolicy array...

CVE-2005-2456

CVE-2005-2456 refers to an array index overflow in the Linux kernel 2.6, in xfrm_user.c within xfrm_sk_policy_insert. A local user can trigger the overflow by supplying a p->dir value larger than XFRM_POLICY_OUT, causing writes beyond sock->sk_policy and resulting in a kernel crash (DoS) an...

CVE-2005-2456

Array index overflow in the xfrmskpolicyinsert function in xfrmuser.c in Linux kernel 2.6 allows local users to cause a denial of service oops or deadlock and possibly execute arbitrary code via a p-dir value that is larger than XFRMPOLICYOUT, which is used as an index in the sock-skpolicy array...

CVE-2004-2135

Cryptoloop in Linux kernel 2.6.x, when used on file systems with a block size of 1024 or greater, contains IV computation weaknesses that allow watermarked files to be detected without decryption. The documented impact is PARTIAL confidentiality loss. No exploits, specific remediations, or affect...

CVE-2005-0135

The unwunwindtouser function in unwind.c on Itanium ia64 architectures in Linux kernel 2.6 allows local users to cause a denial of service system crash...

CVE-2005-0867

Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file...

CVE-2005-0137

CVE-2005-0137 refers to a vulnerability in the Linux kernel 2.6 on Itanium (ia64) where a missing Itanium syscall table entry could be exploited by a local user to trigger a denial of service. The core issue is a kernel-level handling gap for an Itanium syscall entry, enabling a local attacker to...

CVE-2005-0135

The unwunwindtouser function in unwind.c on Itanium ia64 architectures in Linux kernel 2.6 allows local users to cause a denial of service system crash...

security flaw

The unwunwindtouser function in unwind.c on Itanium ia64 architectures in Linux kernel 2.6 allows local users to cause a denial of service system crash...

CVE-2005-0977

The CVE-2005-0977 entry concerns the Linux kernel 2.6 tmpfs shmem_nopage function, where the address argument is not properly verified in shmem.c. This allows a local user to trigger a denial of service (kernel crash) via an invalid address. Public advisories (RHSA-2005:366 / CESA-2005:366) indic...

kernel26lowmem.txt

it is possible to partially overwrite low kernel = 2.6 include include include include include include include define KERNEL include undef KERNEL define MAXV 500 int mainint argc,char argv int epfd; int i; int res; struct epollevent ev; int fds; int over; void km; over= unsigned int-1/sizeofstruc...

CVE-2005-0937

Some futex functions in futex.c for Linux kernel 2.6.x perform getuser calls while holding the mmapsem semaphore, which could allow local users to cause a deadlock condition in dopagefault by triggering getuser faults while another thread is executing mmap or other functions...

CVE-2004-0883

Multiple vulnerabilities in the samba filesystem smbfs in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service crash or gain sensitive information from kernel memory via a samba server 1 returning more data than requested to the smbprocread function, 2 returning a data...

CVE-2004-1337

CVE-2004-1337 concerns the POSIX Capability Linux Security Module (LSM) in the Linux kernel 2.6. If a process is launched before the LSM is loaded, credentials handling can fail, enabling local users to gain elevated privileges (effectively root). The vulnerability is discussed across multiple fe...

security flaw

The binfmtelf loader binfmtelf.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code...

CVE-2004-0883

Multiple vulnerabilities in the samba filesystem smbfs in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service crash or gain sensitive information from kernel memory via a samba server 1 returning more data than requested to the smbprocread function, 2 returning a data...

Linux Kernel 2.6.x - IPTables Logging Rules Integer Underflow Remote (PoC)

/ source: https://www.securityfocus.com/bid/11488/info It is reported that an integer underflow vulnerability is present in the iptables logging rules of the Linux kernel 2.6 branch. A remote attacker may exploit this vulnerability to crash a computer that is running the affected kernel. The 2.6...

Linux 2.6 Netfilter TCP Option Matching DoS

It was possible to crash the remote host by sending a specially malformed TCP/IP packet with invalid TCP options. Only version 2.6 of the Linux kernel is known to be affected by this problem. An attacker may use this flaw to disable this host remotely. C Tenable Network Security, Inc. Ref: From:...