CVE-2012-4444

The CVE-2012-4444 issue affects the Linux kernel prior to 2.6.36, where the ip6_frag_queue function in net/ipv6/reassembly.c can be exploited remotely to bypass certain network restrictions by sending overlapping IPv6 fragments. The vulnerability is consistently described in multiple sources (Lin...

CVE-2009-3288

The CVE-2009-3288 entry affects the Linux kernel 2.6.28-rc1 through 2.6.31-rc8. It concerns the sg_build_indirect function in drivers/scsi/sg.c, which uses an incorrect variable when accessing an array, allowing a local user to cause a Denial of Service via a kernel OOPS and NULL pointer derefere...