Vulnerability in linux-2.6.24 - Several vulnerabilities

Background

The linux-2.6.24 package is a kernel package for the Debian 4.0 (Etch) distribution. It provides the core functionality of the Linux operating system, including device drivers, process management, and memory management. This package is vulnerable to several security issues that could lead to denial of service, sensitive memory leaks, privilege escalation, and other potential risks.

Vulnerability Detail

The vulnerabilities identified in the linux-2.6.24 package are as follows:

1. CVE-2009-2846: A typing issue in the eisa-eeprom driver for the hppa architecture allows local users to gain access to restricted memory.

2. CVE-2009-2847: An issue in the do_sigaltstack routine on 64-bit systems allows local users to access potentially sensitive memory on the kernel stack.

3. CVE-2009-2848: The execve path has a memory corruption issue due to the improper clearing of the clear_child_tid variable, leading to a denial of service.

4. CVE-2009-2849: The sysfs interface to md devices has a vulnerability that allows local users to cause a denial of service when md arrays are not active.

5. CVE-2009-2903: The appletalk implementation has a memory leak issue, which can be exploited by remote attackers to consume large amounts of system memory and cause a denial of service.

6. CVE-2009-2908: The eCryptfs filesystem has a vulnerability that can be exploited by local users to cause a kernel oops and denial of service.

7. CVE-2009-2909: The AX.25 protocol implementation has an issue in the setsockopt() function, which can result in a denial of service.

8. CVE-2009-2910: The 'amd64' kernel does not properly sanitize registers for 32-bit processes, leading to a sensitive kernel memory leak.

9. CVE-2009-3001: The ANSI/IEEE 802.2 LLC implementation has a sensitive memory leak issue, but it requires root privileges to exploit in the Debian lenny kernel.

10. CVE-2009-3002: Several sensitive memory leaks exist in the IrDA, X.25 PLP (Rose), NET/ROM, Acorn Econet/AUN, and Controller Area Network (CAN) implementations, allowing local users to gain access to kernel memory.

11. CVE-2009-3228: The network packet scheduler has uninitialized kernel memory, which can be read by local users.

12. CVE-2009-3238: The get_random_int() function has been modified to increase randomness.

13. CVE-2009-3286: The NFSv4 server implementation can leave files with corrupted permissions, potentially granting unintended privileges to other local users.

14. CVE-2009-3547: The pipe_rdwr_open function has a NULL pointer dereference issue, allowing local users to gain elevated privileges.

15. CVE-2009-3612: The netlink subsystem has a typo in the initialization of a structure, enabling local users to access sensitive kernel memory.

16. CVE-2009-3613: The r8169 driver has an issue where transmitting a large amount of jumbo frames can cause a denial of service and system crash.

17. CVE-2009-3620: The DRM manager for ATI Rage 128 graphics adapters has a vulnerability that can be exploited by local users to cause a NULL pointer dereference and denial of service.

18. CVE-2009-3621: The UNIX domain socket implementation has a deadlock condition, allowing local users to cause a denial of service and system hang.

These vulnerabilities pose various risks, including unauthorized access to restricted memory, sensitive data exposure, denial of service, and potential privilege escalation.

sudo apt-get install --only-upgrade linux-2.6.24

Conclusion

The linux-2.6.24 package is affected by multiple vulnerabilities that can lead to various security risks. To mitigate these risks, it is crucial to upgrade to the latest version of the package, which includes patches and fixes for the identified vulnerabilities. Promptly applying the recommended fix will help ensure the security and stability of the system.

See every vulnerability recorded for linux-2.6.24 →

FAQ