linux-2.6 - multiple vulnerabilities

Fixed packages 3

Vulnerabilities 19

• Unscored —
  CVE-2008-4307

  Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause …

  Jan 13, 2009
• Unscored —
  CVE-2008-5395

  The parisc_show_stack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows lo…

  Dec 9, 2008
• Unscored —
  CVE-2008-5701

  Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allo…

  Dec 22, 2008
• Unscored —
  CVE-2008-5702

  Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might…

  Dec 22, 2008
• Unscored —
  CVE-2008-5713 Public exploit

  The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local user…

  Dec 24, 2008
• Unscored —
  CVE-2009-0028 Public exploit

  The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent p…

  Feb 27, 2009
• Unscored —
  CVE-2009-0029

  The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-…

  Jan 15, 2009
• Unscored —
  CVE-2009-0031

  Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier…

  Jan 21, 2009
• Unscored —
  CVE-2009-0065 Public exploit EPSS 17%

  Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Lin…

  Jan 7, 2009
• Unscored —
  CVE-2009-0322

  drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to c…

  Jan 28, 2009
• Unscored —
  CVE-2009-0675

  The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS request…

  Feb 22, 2009
• Unscored —
  CVE-2009-0676 Public exploit

  The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain struc…

  Feb 22, 2009
• Unscored —
  CVE-2009-0834

  The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly hand…

  Mar 6, 2009
• Unscored —
  CVE-2009-0859

  The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is d…

  Mar 9, 2009
• Unscored —
  CVE-2009-1192

  The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsy…

  Apr 24, 2009
• Unscored —
  CVE-2009-1265

  Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1…

  Apr 8, 2009
• Unscored —
  CVE-2009-1336

  fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores t…

  Apr 22, 2009
• Unscored —
  CVE-2009-1337 Public exploit

  The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the…

  Apr 22, 2009
• Unscored —
  CVE-2009-1439

  Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a …

  Apr 27, 2009