linux-2.6 - several vulnerabilities

Fixed packages 1

Vulnerabilities 13

• Unscored —
  CVE-2009-3939

  The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissio…

  Nov 16, 2009
• Unscored —
  CVE-2009-4027

  Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to…

  Dec 2, 2009
• Unscored —
  CVE-2009-4536

  drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames tha…

  Jan 12, 2010
• Unscored —
  CVE-2009-4538

  drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the s…

  Jan 12, 2010
• Unscored —
  CVE-2010-0003

  The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print…

  Jan 26, 2010
• Unscored —
  CVE-2010-0007

  net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4…

  Jan 19, 2010
• Unscored —
  CVE-2010-0291

  The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling …

  Feb 15, 2010
• Unscored —
  CVE-2010-0298

  The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining…

  kernel Azure Linux
  Feb 12, 2010
• Unscored —
  CVE-2010-0306

  The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Pr…

  Feb 12, 2010
• Unscored —
  CVE-2010-0307 Public exploit

  The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ens…

  Feb 17, 2010
• Unscored —
  CVE-2010-0309

  The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly …

  kernel Azure Linux
  Feb 12, 2010
• Unscored —
  CVE-2010-0410

  drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memo…

  Feb 21, 2010
• Unscored —
  CVE-2010-0415 Public exploit

  The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which a…

  Feb 17, 2010