linux-2.6 vulnerabilities

Products

• linux-2.6 3

Latest linux-2.6 CVEs

Newest publication first

1. CVE-2007-3732 In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRAC...

   Published 2019-11-07

   Medium·CVSS 5.5 EPSS 0.38%

   In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that "current" references work. Wit...

2. CVE-2010-2243 A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current...

   Published 2019-11-07

   High·CVSS 7.5 EPSS 2.5%

   A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS.

3. CVE-2006-4243 linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.

   Published 2019-11-06

   Critical·CVSS 9.8 EPSS 1.8%

   linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.