linux-2.6.24 - several vulnerabilities

Fixed packages 1

Vulnerabilities 24

• Unscored —
  CVE-2008-4307

  Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause …

  Jan 13, 2009
• Unscored —
  CVE-2008-5079 Public exploit

  net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of ser…

  Dec 9, 2008
• Unscored —
  CVE-2008-5395

  The parisc_show_stack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows lo…

  Dec 9, 2008
• Unscored —
  CVE-2008-5700

  libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users t…

  Dec 22, 2008
• Unscored —
  CVE-2008-5701

  Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allo…

  Dec 22, 2008
• Unscored —
  CVE-2008-5702

  Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might…

  Dec 22, 2008
• Unscored —
  CVE-2009-0028 Public exploit

  The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent p…

  Feb 27, 2009
• Unscored —
  CVE-2009-0029

  The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-…

  Jan 15, 2009
• Unscored —
  CVE-2009-0031

  Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier…

  Jan 21, 2009
• Unscored —
  CVE-2009-0065 Public exploit EPSS 17%

  Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Lin…

  Jan 7, 2009
• Unscored —
  CVE-2009-0269

  fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial …

  Jan 26, 2009
• Unscored —
  CVE-2009-0322

  drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to c…

  Jan 28, 2009
• Unscored —
  CVE-2009-0675

  The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS request…

  Feb 22, 2009
• Unscored —
  CVE-2009-0676 Public exploit

  The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain struc…

  Feb 22, 2009
• Unscored —
  CVE-2009-0745

  The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 …

  Feb 27, 2009
• Unscored —
  CVE-2009-0834

  The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly hand…

  Mar 6, 2009
• Unscored —
  CVE-2009-0859

  The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is d…

  Mar 9, 2009
• Unscored —
  CVE-2009-1046 Public exploit

  The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when t…

  Mar 23, 2009
• Unscored —
  CVE-2009-1192

  The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsy…

  Apr 24, 2009
• Unscored —
  CVE-2009-1242

  The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel befor…

  Apr 6, 2009
• Unscored —
  CVE-2009-1265

  Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1…

  Apr 8, 2009
• Unscored —
  CVE-2009-1337 Public exploit

  The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the…

  Apr 22, 2009
• Unscored —
  CVE-2009-1338

  The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces …

  Apr 22, 2009
• Unscored —
  CVE-2009-1439

  Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a …

  Apr 27, 2009