linux-2.6.24 - several vulnerabilities

Fixed packages 1

Vulnerabilities 18

• Unscored —
  CVE-2009-2846

  The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel bef…

  Aug 18, 2009
• Unscored —
  CVE-2009-2847 Public exploit

  The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when runni…

  Aug 18, 2009
• Unscored —
  CVE-2009-2848

  The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_ch…

  Aug 18, 2009
• Unscored —
  CVE-2009-2849

  The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of servic…

  Aug 18, 2009
• Unscored —
  CVE-2009-2903

  Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the ap…

  Sep 15, 2009
• Unscored —
  CVE-2009-2908

  The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denia…

  Oct 13, 2009
• Unscored —
  CVE-2009-2909

  Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kerne…

  Oct 20, 2009
• Unscored —
  CVE-2009-2910

  arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel regi…

  Oct 20, 2009
• Unscored —
  CVE-2009-3001 Public exploit

  The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certai…

  Aug 28, 2009
• Unscored —
  CVE-2009-3002 Public exploit

  The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows l…

  Aug 28, 2009
• Unscored —
  CVE-2009-3228

  The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.…

  Oct 19, 2009
• Unscored —
  CVE-2009-3238

  The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random n…

  Sep 18, 2009
• Unscored —
  CVE-2009-3286

  NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL creat…

  Sep 22, 2009
• Unscored —
  CVE-2009-3547 Public exploit

  Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of serv…

  Nov 4, 2009
• Unscored —
  CVE-2009-3612

  The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5,…

  Oct 19, 2009
• Unscored —
  CVE-2009-3613 Public exploit EPSS 12%

  The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote…

  Oct 19, 2009
• Unscored —
  CVE-2009-3620

  The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command …

  Oct 22, 2009
• Unscored —
  CVE-2009-3621 Public exploit

  net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system han…

  Oct 22, 2009