Unscored DSA-1653-1 7 CVEs

fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Published Oct 13, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 3

Release	Package	Fixed in
Debian · 4.0	fai-kernels	1.17+etch.22etch3
Debian · 4.0	linux-2.6	2.6.18.dfsg.1-22etch3
Debian · 4.0	user-mode-linux	2.6.18-1um-2etch.22etch3

Vulnerabilities 7

Unscored —

CVE-2007-6716

fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which …

Sep 4, 2008
Unscored —

CVE-2008-1514

arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local u…

Mar 26, 2008
Unscored —

CVE-2008-3276

Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol…

Aug 18, 2008
Unscored —

CVE-2008-3525

The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for …

Sep 3, 2008
Unscored —

CVE-2008-3833

The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid …

Oct 3, 2008
Unscored —

CVE-2008-4210 Public exploit

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a f…

Sep 29, 2008
Unscored —

CVE-2008-4302 Public exploit

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_t…

Sep 29, 2008