Unscored DSA-1378-2 5 CVEs

fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Published Sep 28, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 3

Release	Package	Fixed in
Debian · 4.0	fai-kernels	1.17+etch.13etch3
Debian · 4.0	linux-2.6	2.6.18.dfsg.1-13etch3
Debian · 4.0	user-mode-linux	2.6.18-1um-2etch.13etch3

Vulnerabilities 5

Unscored —

CVE-2007-3731

The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs (the xcs field) duri…

Sep 17, 2007
Unscored —

CVE-2007-3739

mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reser…

Sep 14, 2007
Unscored —

CVE-2007-3740

The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask…

Sep 14, 2007
Unscored —

CVE-2007-4573 Public exploit

The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_6…

Sep 24, 2007
Unscored —

CVE-2007-4849

JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when POSIX ACL support is ena…

Sep 12, 2007