|
|
Subscribe / Log in / New account

kernel: multiple vulnerabilities

Package(s):linux, linux-source-2.6.15 CVE #(s):CVE-2010-1148 CVE-2010-1488
Created:June 3, 2010 Updated:September 23, 2010
Description:

From the Ubuntu advisory:

Eugene Teo discovered that CIFS did not correctly validate arguments when creating new files. A local attacker could exploit this to crash the system, leading to a denial of service, or possibly gain root privileges if mmap_min_addr was not set. (CVE-2010-1148)

Oleg Nesterov discovered that the Out-Of-Memory handler did not correctly handle certain arrangements of processes. A local attacker could exploit this to crash the system, leading to a denial of service. (CVE-2010-1488)

Alerts:
openSUSE openSUSE-SU-2010:0664-1 Linux 2010-09-23
MeeGo MeeGo-SA-10:01 kernel 2010-07-07
Ubuntu USN-947-1 linux, linux-source-2.6.15 2010-06-03
Ubuntu USN-947-2 kernel 2010-06-04

to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds