USN-2777-1 linux-lts-utopic vulnerabilities

It was discovered that virtio networking in the Linux kernel did not handle fragments correctly, leading to kernel memory corruption. A remote attacker could use this to cause a denial of service system crash or possibly execute code with administrative privileges. CVE-2015-5156 Benjamin Randazzo...

Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2751-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2751-1 advisory. Benjamin Randazzo discovered an information leak in the md multiple device driver when the bitmapinfo.file is disabled. A local privileged attacker could...

Ubuntu 15.04 : linux vulnerabilities (USN-2752-1)

Benjamin Randazzo discovered an information leak in the md multiple device driver when the bitmapinfo.file is disabled. A local privileged attacker could use this to obtain sensitive information from the kernel. CVE-2015-5697 Marc-Andre Lureau discovered that the vhost driver did not properly...

USN-2751-1 linux-lts-vivid vulnerabilities

Benjamin Randazzo discovered an information leak in the md multiple device driver when the bitmapinfo.file is disabled. A local privileged attacker could use this to obtain sensitive information from the kernel. CVE-2015-5697 Marc-André Lureau discovered that the vhost driver did not properly...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2748-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2748-1 advisory. Benjamin Randazzo discovered an information leak in the md multiple device driver when the bitmapinfo.file is disabled. A local privileged attacker could...

Debian DLA-310-1 : linux-2.6 security update

This update fixes the CVEs described below. CVE-2015-0272 It was discovered that NetworkManager would set IPv6 MTUs based on the values received in IPv6 RAs Router Advertisements, without sufficiently validating these values. A remote attacker could exploit this attack to disable IPv6 connectivit...

Ubuntu 12.04 LTS : linux vulnerability (USN-2731-1)

Benjamin Randazzo discovered an information leak in the md multiple device driver when the bitmapinfo.file is disabled. A local privileged attacker could use this to obtain sensitive information from the kernel. Note that Tenable Network Security has extracted the preceding description block...

Ubuntu: Security Advisory (USN-2732-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-3329-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3329-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. - CVE-2015-1333 Colin Ian King discovered a flaw in the addkey function of the Linux kernel's keyring subsystem. A local user can exploit this flaw to...

kernel: md: NULL pointer deref when accessing suspend_* sysfs attributes

The md driver drivers/md/md.c in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service NULL pointer dereference via vectors related to "suspend sysfs attributes" and the 1 suspendlostore or 2 suspendhistore functions. NOTE: this is only a vulnerability when sysfs i...

Null pointer dereference

The md driver drivers/md/md.c in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service NULL pointer dereference via vectors related to "suspend sysfs attributes" and the 1 suspendlostore or 2 suspendhistore functions. NOTE: this is only a vulnerability when sysfs i...

CVE-2009-2849

The md driver drivers/md/md.c in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service NULL pointer dereference via vectors related to "suspend sysfs attributes" and the 1 suspendlostore or 2 suspendhistore functions. NOTE: this is only a vulnerability when sysfs i...

CVE-2009-2849

CVE-2009-2849 affects the Linux kernel md driver (drivers/md/md.c) prior to version 2.6.30.2. The issue allows local attackers to trigger a NULL pointer dereference in suspend_lo_store and suspend_hi_store via writable sysfs suspend_* attributes, potentially causing a denial of service. The vulne...