Vulnerabilities > Linux > Linux Kernel > 2.6.26.7

DATE CVE VULNERABILITY TITLE RISK
2009-02-27 CVE-2009-0028 Permissions, Privileges, and Access Controls vulnerability in Linux Kernel
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
local
low complexity
linux CWE-264
2.1
2008-12-09 CVE-2008-5079 Resource Management Errors vulnerability in Linux Kernel
net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.
local
low complexity
linux CWE-399
4.9
2008-11-21 CVE-2008-5182 Race Condition vulnerability in Linux Kernel
The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.
local
linux CWE-362
6.9
2008-11-10 CVE-2008-5029 Local Denial of Service vulnerability in Linux Kernel '__scm_destroy()'
The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
local
low complexity
linux
4.9
2008-08-08 CVE-2008-3535 Off-By-One Error vulnerability in Linux Kernel
Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
local
low complexity
linux debian canonical CWE-193
4.9
2006-07-05 CVE-2006-2935 Classic Buffer Overflow vulnerability in multiple products
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
local
low complexity
linux debian canonical CWE-120
4.6