Several vulnerabilities have been discovered in the Linux kernel that may lead
to a denial of service, information leak or privilege escalation. The Common
Vulnerabilities and Exposures project identifies the following problems:
CVE-2013-2141
Emese Revfy provided a fix for an information leak in the tkill and
tgkill system calls. A local user on a 64-bit system maybe able to
gain access to sensitive memory contents.
CVE-2013-2164
Jonathan Salwan reported an information leak in the CD-ROM driver. A
local user on a system with a malfunctioning CD-ROM drive could gain
access to sensitive memory.
CVE-2013-2206
Karl Heiss reported an issue in the Linux SCTP implementation. A remote
user could cause a denial of service (system crash).
CVE-2013-2232
Dave Jones and Hannes Frederic Sowa resolved an issue in the IPv6
subsystem. Local users could cause a denial of service by using an
AF_INET6 socket to connect to an IPv4 destination.
CVE-2013-2234
Mathias Krause re...
Get the latest Linux and open source security news straight to your inbox.