linux-2.6 - security update

Fixed packages 1

Vulnerabilities 12

• Unscored —
  CVE-2013-4387

  net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Off…

  linux Debian
  Oct 10, 2013
• Unscored —
  CVE-2013-4470

  The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain dat…

  linux Debian
  Nov 4, 2013
• Unscored —
  CVE-2014-0203

  The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathnam…

  linux Debian
  Jun 23, 2014
• Unscored —
  CVE-2014-2678

  The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial o…

  linux Debian
  Apr 1, 2014
• Unscored —
  CVE-2014-3122

  The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages…

  linux linux Debian Ubuntu
  May 11, 2014
• Unscored —
  CVE-2014-3144

  The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/c…

  linux linux Debian Ubuntu
  May 11, 2014
• Unscored —
  CVE-2014-3145

  The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kern…

  linux linux Debian Ubuntu
  May 11, 2014
• Unscored —
  CVE-2014-3917

  kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, al…

  linux linux Debian Ubuntu
  Jun 5, 2014
• Unscored —
  CVE-2014-4652

  Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the AL…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 3, 2014
• Unscored —
  CVE-2014-4656

  Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 3, 2014
• Unscored —
  CVE-2014-4667

  The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a…

  linux linux Debian Ubuntu
  Jul 3, 2014
• Unscored —
  CVE-2014-4699 Public exploit

  The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the save…

  linux linux Debian Ubuntu
  Jul 9, 2014