CVE-2012-6539: Exposure of Sensitive Information to an Unauthorized Actor

The devifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

CVE-2013-2546: Undefined Security Weakness

The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAPNETADMIN capability...

CVE-2012-6547: Exposure of Sensitive Information to an Unauthorized Actor

The tunchrioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

PT-2013-1020

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue exists in the tun chr ioctl function in drivers/net/tun.c due to the lack of initialization of certain structures. This allows local users to obtain sensitive information from kernel sta...

PT-2013-1016

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue exists in the l2tp ip6 getname function in the Linux kernel due to incorrect return values under certain circumstances. This allows local users to access sensitive information from kerne...

Ubuntu 10.04 LTS / 10.10 : linux-mvl-dove vulnerabilities (USN-1093-1)

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service...

PT-2013-1013

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue exists due to the lack of initialization of certain structures for IP VS SO GET TIMEOUT commands in the do ip vs get ctl function. This allows local users to obtain sensitive information...

PT-2013-1019

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue is related to the ATM implementation in the Linux kernel, which does not properly initialize certain structures. This allows local users to obtain sensitive information from kernel stack...

UBUNTU-CVE-2012-6541

The ccid3hctxgetsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

CVE-2012-6546

The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

PT-2013-1014

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue exists in the ccid3 hc tx getsockopt function due to the lack of initialization of certain structures. This allows local users to obtain sensitive information from kernel stack memory vi...

kernel: security and bugfix update (important)

The Linux kernel was updated to fix various bugs and security issues: CVE-2013-0871: Race condition in the ptrace functionality in the Linux kernel allowed local users to gain privileges via a PTRACESETREGS ptrace system call in a crafted application, as demonstrated by ptracedeath. CVE-2013-0160...

Medium: kernel

Issue Overview: It was found that a deadlock could occur in the Out of Memory OOM killer. A process could trigger this deadlock by consuming a large amount of memory, and then causing requestmodule to be called. A local, unprivileged user could use this flaw to cause a denial of service excessive...

Debian DSA-2632-1 : linux-2.6 - privilege escalation/denial of service

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-0231 Jan Beulich provided a fix for an issue in the Xen PCI backend driver...

CVE-2012-4530

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

CVE-2012-4530

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

PT-2013-1110

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Debian GNU/Linux affected versions not specified Description The issue concerns multiple vulnerabilities in the Linux package of the Debian GNU/Linux operating system, which can be exploited by a local...

CVE-2012-4530: Exposure of Sensitive Information to an Unauthorized Actor

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

PT-2013-1107

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the caif seqpkt recvmsg function in net/caif/caif socket.c not initializing a certain leng...

PT-2013-1109

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue concerns multiple vulnerabilities in the Linux operating system, specifically in the Debian GNU/Linux package, which can be exploited by a local attacker to compromise the...