linux-2.6 - several vulnerabilities

Fixed packages 1

Vulnerabilities 10

• Unscored —
  CVE-2009-1883

  The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability che…

  Sep 18, 2009
• Unscored —
  CVE-2009-2909

  Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kerne…

  Oct 20, 2009
• Unscored —
  CVE-2009-3001 Public exploit

  The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certai…

  Aug 28, 2009
• Unscored —
  CVE-2009-3002 Public exploit

  The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows l…

  Aug 28, 2009
• Unscored —
  CVE-2009-3228

  The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.…

  Oct 19, 2009
• Unscored —
  CVE-2009-3238

  The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random n…

  Sep 18, 2009
• Unscored —
  CVE-2009-3286

  NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL creat…

  Sep 22, 2009
• Unscored —
  CVE-2009-3547 Public exploit

  Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of serv…

  Nov 4, 2009
• Unscored —
  CVE-2009-3612

  The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5,…

  Oct 19, 2009
• Unscored —
  CVE-2009-3621 Public exploit

  net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system han…

  Oct 22, 2009