linux-2.6 user-mode-linux - several vulnerabilities

Fixed packages 2

Vulnerabilities 13

• Unscored —
  CVE-2009-0028 Public exploit

  The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent p…

  Feb 27, 2009
• Unscored —
  CVE-2009-0834

  The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly hand…

  Mar 6, 2009
• Unscored —
  CVE-2009-0835 Public exploit

  The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier o…

  Mar 6, 2009
• Unscored —
  CVE-2009-0859

  The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is d…

  Mar 9, 2009
• Unscored —
  CVE-2009-1046 Public exploit

  The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when t…

  Mar 23, 2009
• Unscored —
  CVE-2009-1072

  nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thr…

  Mar 25, 2009
• Unscored —
  CVE-2009-1184

  The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux ker…

  May 5, 2009
• Unscored —
  CVE-2009-1192

  The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsy…

  Apr 24, 2009
• Unscored —
  CVE-2009-1242

  The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel befor…

  Apr 6, 2009
• Unscored —
  CVE-2009-1265

  Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1…

  Apr 8, 2009
• Unscored —
  CVE-2009-1337 Public exploit

  The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the…

  Apr 22, 2009
• Unscored —
  CVE-2009-1338

  The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces …

  Apr 22, 2009
• Unscored —
  CVE-2009-1439

  Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a …

  Apr 27, 2009