Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Category:Debian Local Security Checks
Title:Debian Security Advisory DSA 1653-1 (linux-2.6)
The remote host is missing an update to linux-2.6
announced via advisory DSA 1653-1.

Several vulnerabilities have been discovered in the Linux kernel that
may lead to a denial of service or privilege escalation. The Common
Vulnerabilities and Exposures project identifies the following


Joe Jin reported a local denial of service vulnerability that
allows system users to trigger an oops due to an improperly
initialized data structure.


Jan Kratochvil reported a local denial of service vulnerability in
the ptrace interface for the s390 architecture. Local users can
trigger an invalid pointer dereference, leading to a system panic.


Eugene Teo reported an integer overflow in the DCCP subsystem that
may allow remote attackers to cause a denial of service in the
form of a kernel panic.


Eugene Teo reported a lack of capability checks in the kernel
driver for Granch SBNI12 leased line adapters (sbni), allowing
local users to perform privileged operations.


The S_ISUID/S_ISGID bits were not being cleared during an inode
splice, which, under certain conditions, can be exploited by local
users to obtain the privileges of a group for which they are not a
member. Mark Fasheh reported this issue.


David Watson reported an issue in the open()/creat() system calls
which, under certain conditions, can be exploited by local users
to obtain the privileges of a group for which they are not a


A coding error in the splice subsystem allows local users to
attempt to unlock a page structure that has not been locked,
resulting in a system crash.

For the stable distribution (etch), this problem has been fixed in
version 2.6.18.dfsg.1-22etch3.

We recommend that you upgrade your linux-2.6, fai-kernels, and


CVSS Score:

CVSS Vector:

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2007-6716
BugTraq ID: 31515
Debian Security Information: DSA-1653 (Google Search)
RedHat Security Advisories: RHSA-2008:0972
SuSE Security Announcement: SUSE-SA:2008:047 (Google Search)
SuSE Security Announcement: SUSE-SA:2008:051 (Google Search)
SuSE Security Announcement: SUSE-SA:2008:052 (Google Search)
SuSE Security Announcement: SUSE-SA:2008:056 (Google Search)
SuSE Security Announcement: SUSE-SR:2008:025 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2008-1514
BugTraq ID: 31177
Debian Security Information: DSA-1655 (Google Search)
XForce ISS Database: linux-kernel-ptrace-dos(41501)
Common Vulnerability Exposure (CVE) ID: CVE-2008-3276
BugTraq ID: 30704
Debian Security Information: DSA-1636 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2008-3525
SuSE Security Announcement: SUSE-SA:2008:049 (Google Search)
SuSE Security Announcement: SUSE-SA:2008:053 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2008-3833
BugTraq ID: 31567
XForce ISS Database: kernel-genericfilesplice-priv-escalation(45922)
Common Vulnerability Exposure (CVE) ID: CVE-2008-4210
BugTraq ID: 31368
SuSE Security Announcement: SUSE-SA:2008:057 (Google Search)
XForce ISS Database: linux-kernel-open-privilege-escalation(45539)
Common Vulnerability Exposure (CVE) ID: CVE-2008-4302
BugTraq ID: 31201
XForce ISS Database: linux-kernel-addtopagecachelru-dos(45191)
CopyrightCopyright (c) 2008 E-Soft Inc.

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2022 E-Soft Inc. All rights reserved.