Mandrake Linux Security Advisory : kernel (MDKSA-2005:219)

Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this update : An integer overflow in vcresize CVE-2004-1333. A race condition in the sysfsreadfile and sysfswritefile functions in 2.6.10 and earlier allows local users to read kernel memory and cause a DoS cra...

MDKSA-2005:218 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:218 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: Corporate 3.0, Multi Network Firewall 2.0 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have...

[USN-178-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-178-1 September 09, 2005 linux-source-2.6.10, linux-source-2.6.8.1 vulnerabilities CAN-2005-1913, CAN-2005-2490, CAN-2005-2492, CAN-2005-2800, CAN-2005-2801, CAN-2005-2802...

USN-131-1: Linux kernel vulnerabilities

Colin Percival discovered an information disclosure in the "Hyper Threading Technology" architecture in processors which are capable of simultaneous multithreading in particular Intel Pentium 4, Intel Mobile Pentium 4, and Intel Xeon processors. This allows a malicious thread to monitor the...

SUSE-SA:2005:018: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:018 kernel. The Linux kernel is the core component of the Linux system. Several vulnerabilities were reported in the last few weeks which are fixed by this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin...

CVE-2005-0180

Multiple integer signedness errors in the sgscsiioctl function in scsiioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copyfromuser and copytouser functions...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. This advisory...

USN-82-1: Linux kernel vulnerabilities

CAN-2004-0176: Michael Kerrisk noticed an insufficient permission checking in the shmctl function. Any process was permitted to lock/unlock any System V shared memory segment that fell within the the RLIMITMEMLOCK limit that is the maximum size of shared memory that unprivileged users can acquire...

SUSE-SA:2005:003: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:003 kernel. Several exploitable security problems were identified and fixed in the Linux kernel, the core of every SUSE Linux product. - Due to missing locking in the sysuselib system call a local attacker can gain root access. Th...

SUSE-SA:2004:044: kernel

The remote host is missing the patch for the advisory SUSE-SA:2004:044 kernel. Several vulnerabilities have been found and fixed in the Linux kernel. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2004:044 if !...

Mandrake Linux Security Advisory : kernel (MDKSA-2005:022)

A number of vulnerabilities are fixed in the 2.4 and 2.6 kernels with this advisory : - Multiple race conditions in the terminal layer of 2.4 and 2.6 kernels prior to 2.6.9 can allow a local attacker to obtain portions of kernel data or allow remote attackers to cause a kernel panic by switching...

USN-60-0: Linux kernel vulnerabilities

CAN-2005-0001: Paul Starzetz discovered a race condition in the Linux page fault handler code. This allowed an unprivileged user to gain root privileges on multiprocessor machines under some circumstances. This also affects the Hyper-Threading mode on Pentium 4 processors...

CVE-2004-1151

Multiple buffer overflows in the 1 sys32nisyscall and 2 sys32vm86warning functions in sysia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain privileges...

CVE-2004-1137

Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via 1 the ipmcsource function, which decrements a counter to -1, or 2 the igmpmarksources function, whi...

USN-47-1: Linux kernel vulnerabilities

Georgi Guninski discovered two Denial of Service vulnerabilities in the Linux kernel. An integer overflow in the vcresize function caused the memory allocation for the new screen being too short, thus causing a buffer overflow and a kernel crash. There was also a memory leak in the ipoptionsget...

CVE-2004-1337

The POSIX Capability Linux Security Module LSM for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges...

Linux Kernel <= 2.6.9, <= 2.4.28 Memory Leak Local DoS

Exploit for linux platform in category dos / poc ====================================================== Linux Kernel include include include include include include include include include int mainint ac,char av struct msghdr msghdr; struct iovec iovector10; int i,s,j,ma; struct sockaddrin sockad...

CVE-2004-1137

Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via 1 the ipmcsource function, which decrements a counter to -1, or 2 the igmpmarksources function, whi...

USN-38-1: Linux kernel vulnerabilities

CAN-2004-0814: Vitaly V. Bursov discovered a Denial of Service vulnerability in the "serio" code; opening the same tty device twice and doing some particular operations on it caused a kernel panic and/or a system lockup. Fixing this vulnerability required a change in the Application Binary...

[USN-38-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-38-1 December 14, 2004 linux-source-2.6.8.1 vulnerabilities CAN-2004-0814, CAN-2004-1016, CAN-2004-1056, CAN-2004-1058, CAN-2004-1068, CAN-2004-1069, CAN-2004-1137, CAN-2004-1151...