Alan Cox

The issue concerns the `vm map lookup` function in the kernel's mmap implementation, which fails to properly determine whether a task should have write access to a memory location. This allows local users to bypass filesystem write permissions and gain privileges by leveraging read permissions through a crafted application that makes `mmap` and `ptrace` system calls.

The issue allows local users to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This is achieved through an IPOPT CIPSO IP OPTIONS setsockopt system call. The `cipso v4 validate` function in `net/ipv4/cipso ipv4.c` is the vulnerable component.

The issue is related to the Linux kernel, specifically the HCI UART driver, where the hci uart tty open function does not verify whether the tty has a write operation. This allows local users to cause a denial of service via vectors related to the Bluetooth driver. Additionally, multiple vulnerabilities have been identified in various Linux kernel packages, including kernel-devel, kernel-doc, kernel-hugemem, kernel-largesmp, and kernel-smp, which can lead to confidentiality, integrity, and availability breaches. These vulnerabilities can be exploited remotely.

A race condition exists in the hvc close function, which can be exploited by local users to cause a denial of service or possibly have other unspecified impacts. This issue is related to the hvc open and hvc remove functions and occurs when closing a Hypervisor Virtual Console device.

Name of the Vulnerable Software and Affected Versions: Linux versions 2.4 and 2.5 Description: The kernel strncpy function does not %NUL pad the buffer on architectures other than x86, contrary to the expected behavior of strncpy as implemented in libc. This discrepancy could lead to information leaks. Recommendations: For Linux versions 2.4 and 2.5, consider applying a patch or modification to the kernel strncpy function to ensure %NUL padding of the buffer on all architectures. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue involves multiple vulnerabilities that can be exploited remotely, potentially leading to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities may cause a denial of service or allow the execution of arbitrary code via maths overflow errors, including integer signedness errors or integer overflows that lead to buffer overflows.

The issue is related to multiple vulnerabilities in the gtkhtml package, which can lead to a denial of service (crash) due to a null pointer dereference when a malformed message is processed. This can be exploited remotely, potentially disrupting the availability of protected information.