kernel: several vulnerabilities [LWN.net]

Package(s):

linux-2.6

CVE #(s):

CVE-2008-1294 CVE-2008-1375

Created:

May 2, 2008

Updated:

April 3, 2009

Description:

From the Debian advisory: David Peer discovered that users could escape administrator imposed cpu time limitations (RLIMIT_CPU) by setting a limit of 0. (CVE-2008-1294) Alexander Viro discovered a race condition in the directory notification subsystem that allows local users to cause a Denial of Service (oops) and possibly result in an escalation of privileges. (CVE-2008-1375)

Alerts:

SuSE	SUSE-SA:2009:017	2009-04-03
Mandriva	MDVSA-2008:167	2008-08-12
CentOS	CESA-2008:0612	2008-08-06
Red Hat	RHSA-2008:0612-01	2008-08-04
SuSE	SUSE-SA:2008:032	2008-07-07
SuSE	SUSE-SA:2008:031	2008-07-02
SuSE	SUSE-SA:2008:030	2008-06-20
Ubuntu	USN-618-1	2008-06-19
Ubuntu	USN-614-1	2008-06-03
Mandriva	MDVSA-2008:105	2007-05-21
Mandriva	MDVSA-2008:104	2008-05-20
Fedora	FEDORA-2008-3949	2008-05-14
Fedora	FEDORA-2008-3873	2008-05-14
CentOS	CESA-2008:0237	2008-05-09
CentOS	CESA-2008:0233	2008-05-09
CentOS	CESA-2008:0211	2008-05-07
Red Hat	RHSA-2008:0233-01	2008-05-07
Red Hat	RHSA-2008:0237-01	2008-05-07
Red Hat	RHSA-2008:0211-01	2008-05-07
rPath	rPSA-2008-0157-1	2008-05-02
Debian	DSA-1565-1	2008-05-01

(Log in to post comments)