Oracle Linux 5.7 kernel security and bug fix update

2.6.18-274.el5 - xen svm: fix invlpg emulator regression Paolo Bonzini 719894 2.6.18-273.el5 - Revert: fs proc: Fix rmmod/read/write races in /proc entries Jarod Wilson 717068 - xen disregard trailing bytes in an invalid page Paolo Bonzini 717742 - xen prep getinstructionlengthfromlist for partia...

kernel security and bug fix update

2.6.18-238.19.1.0.1.el5 - scsi remove printk's when doing I/O to a dead device John Sobecki, Chris Mason orabug 12342275 - char ipmi: Fix IPMI errors due to timing problems Joe Jin orabug 12561346 - scsi Fix race when removing SCSI devices Joe Jin orabug 12404566 - bonding: reread information abo...

kernel security and bug fix update

2.6.32-131.6.1.el6 - audit ia32entry.S sign extend error codes when calling 64 bit code Eric Paris 713831 703935 - audit push audit success and retcode into arch ptrace.h Eric Paris 713831 703935 - x86 intel-iommu: Flush unmaps at domainexit Alex Williamson 713458 705441 - x86 intel-iommu: Only...

Linux Kernel fs/partitions/osf.c信息泄露漏洞

BUGTRAQ ID: 46878 CVE ID: CVE-2011-1163 Linux Kernel是Linux操作系统的内核。 Linux Kernel在fs/partitions/osf.c的实现上存在信息泄露漏洞，本地攻击者可利用此漏洞从堆内存获取敏感信息。 自动验证存储设备的OSF分区表的代码中存在缓冲区溢出错误 Linux kernel 2.6.x OpenVZ Project OpenVZ 028stab091.1 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

RHEL 5 : kernel (RHSA-2011:0833)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0833 advisory. - kernel: proc: protect mm startcode/endcode in /proc/pid/stat CVE-2011-0726 - kernel: bt scoconninfo infoleak CVE-2011-1078 - kernel: bnep...

kernel security and bug fix update

2.6.18-238.12.1.0.1.el5 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory...

kernel: xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1

The xfsfsgeometry function in fs/xfs/xfsfsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRYV1 ioctl call...

kernel security, bug fix, and enhancement update

2.6.32-71.29.1.el6 - mm Revert 'mm pdpte registers are not flushed when PGD entry is changed in x86 PAE mode' Larry Woodman 695256 691310 2.6.32-71.28.1.el6 - net bonding: fix jiffy comparison issues Andy Gospodarek 698109 696337 - drm radeon/kms: check AA resolve registers on r300 + regression f...

Design/Logic Flaw

The osfpartition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing...

Solaris 10 (x86) : 146803-03

SunOS 5.10x86: ufs fs patch. Date this patch was last updated by Sun : May/31/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 10 (sparc) : 146802-03

SunOS 5.10: ufs fs patch. Date this patch was last updated by Sun : May/31/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 9 (x86) : 122717-02

SunOS 5.9x86: kernel/fs/lofs patch. Date this patch was last updated by Sun : Mar/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Linux Kernel "fs/partitions/ldm.c"缓冲区溢出和拒绝服务漏洞

BUGTRAQ ID: 46512 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"fs/partitions/ldm.c"在实现上存在缓冲区溢出和拒绝服务漏洞，攻击者可利用此漏洞执行任意代码、提升权限、泄露敏感信息和造成拒绝服务。 不管是否启用了自动分区，Kernel自动评估存储设备分区表。评估MAC和LDM分区表的代码包含下列漏洞： 1、fs/partitions/mac.c中的macpartition存在缓冲区溢出漏洞导致通过破坏的MAC分区表造成拒绝服务。...

CVE-2011-1012

CVE-2011-1012 affects the Linux kernel, in particular the LDM partition handling. The flaw lies in ldm_parse_vmdb in fs/partitions/ldm.c, which does not validate the VBLK size in the VMDB structure of an LDM partition table. A crafted partition table can trigger a divide-by-zero and cause a kerne...

Oracle Linux 4.9 kernel security and bug fix update

2.6.9-100 -cxgb3: prevent reading uninitialized stack memory to fix xgbextensionioctl infoleak Eugene Teo 633153 CVE-2010-3296 -mlx4: disable MSI-X by default Andy Gospodarek 530596 -ext3: call fs invalidatepage instead of blockinvalidatepage Josef Bacik 488611 -av7110: check for negative array...

Mandriva Update for kernel MDVSA-2011:029 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2011:029 kernel Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Oracle Linux 5.6 kernel security and bug fix update

2.6.18-238.el5 - net bnx2: remove extra call to pcimappage John Feeney 663509 - fs nfs: set lockcontext field in nfsreadpagesync Jeff Layton 663853 2.6.18-237.el5 - block fully zeroize request struct in rqinit Rob Evers 662154 - scsi qla4xxx: update to 5.02.04.02.05.06-d0 Chad Dupuis 656999 - scs...

PT-2011-1485 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37 Description: The issue allows local users to cause a denial of service due to memory consumption via a crafted exec system call. This is related to the handling of stack memory by arrays representing...

CVE-2010-4162

Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service system crash via a crafted device ioctl to a SCSI device...

Integer overflow

Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service system crash via a crafted device ioctl to a SCSI device...