[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SA:2010:018 -- SUSE kernel local privilege escalation, local information disclosure

ID: oval:org.secpod.oval:def:400052Date: (C)2012-01-31   (M)2024-02-19
Class: PATCHFamily: unix




This update of the openSUSE 11.2 kernel contains a lot of bug and security fixes. Following security issues were fixed: CVE-2010-0622: The wake_futex_pi function in kernel/futex.c in the Linux kernel does not properly handle certain unlock operations for a Priority Inheritance futex, which allows local users to cause a denial of service and possibly have unspecified other impact via vectors involving modification of the futex value from user space. CVE-2010-0623: The futex_lock_pi function in kernel/futex.c in the Linux kernel does not properly manage a certain reference count, which allows local users to cause a denial of service via vectors involving an umount of an ext3 filesystem. CVE-2010-0415: The do_pages_move function in mm/migrate.c in the Linux kernel does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service , and possibly have unspecified other impact by specifying a node that is not part of the kernel"s node set. CVE-2010-0410: drivers/connector/connector.c in the Linux kernel allows local users to cause a denial of service by sending the kernel many NETLINK_CONNECTOR messages. CVE-2009-4031: The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service on the host OS via unspecified manipulations related to SMP support. This update also contains a large roll-up of fixes for the rt2860 and rt3090 wireless drivers from the mainline kernel.

Platform:
openSUSE 11.2
Product:
kernel
Reference:
SUSE-SA:2010:018
CVE-2009-4031
CVE-2010-0410
CVE-2010-0415
CVE-2010-0622
CVE-2010-0623
CVE    5
CVE-2009-4031
CVE-2010-0623
CVE-2010-0415
CVE-2010-0622
...
CPE    1
cpe:/o:opensuse:opensuse:11.2

© SecPod Technologies