kernel: multiple vulnerabilities [LWN.net]

Package(s):

kernel

CVE #(s):

CVE-2007-0005 CVE-2007-1000

Created:

March 15, 2007

Updated:

November 14, 2007

Description:

The Linux kernel has a boundary error problem with the Omnikey CardMan 4040 driver read and write functions. This can be used to cause a buffer overflow and possible execution or arbitrary code with kernel privileges.

The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c is vulnerable to a NULL pointer dereference. Local users can use this to crash the kernel or to disclose kernel memory.

Alerts:

Fedora	FEDORA-2007-599	2007-06-21
Ubuntu	USN-489-1	2007-07-19
Ubuntu	USN-486-1	2007-07-17
Debian	DSA-1286-1	2007-05-02
Red Hat	RHSA-2007:0169-01	2007-04-30
Mandriva	MDKSA-2007:078	2007-04-04
Fedora	FEDORA-2007-336	2007-03-14
Fedora	FEDORA-2007-335	2007-03-14

(Log in to post comments)