kernel: Null pointer dereference in trace_writeback_dirty_page()

A security flaw was found in the Linux kernel that an attempt to move page mapped by AIO ring buffer to the other node triggers NULL pointer dereference at tracewritebackdirtypage, because aiofsbackingdevinfo.dev is 0...

PT-2016-5354 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.4 Description: The issue is related to the trace writeback dirty page implementation in the Linux kernel, which improperly interacts with mm/migrate.c. This can be exploited by local users to cause a denial of...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20140903)

An out-of-bounds memory access flaw was found in the Linux kernel's system call auditing implementation. On a system with existing audit rules defined, a local, unprivileged user could use this flaw to leak kernel memory to user space or, potentially, crash the system. CVE-2014-3917, Moderate...

CentOS 5 : kernel (CESA-2014:1143)

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

openSUSE Security Update : kernel (openSUSE-SU-2014:0204-1)

The Linux kernel was updated to fix various bugs and security issues : - mm/page-writeback.c: do not count anon pages as dirtyable memory reclaim stalls. - mm/page-writeback.c: fix dirtybalancereserve subtraction from dirtyable memory reclaim stalls. - compatsysrecvmmsg X32 fix bnc860993...

KM-2004-01: Cross-Site Scripting in Blosxom writeback

Security Advisory KM-2004-01: Cross-Site Scripting in Blosxom writeback Affected Application: Blosxom http://www.blosxom.com Severity: Medium to high typical XSS impacts Introduction: Blosxom, a weblog tool, has an optionally-installable plugin commonly used for allowing users to post comments or...