Andrew Morton

4 exploits Active since Jun 2012
CVE-2011-2183 WRITEUP WRITEUP
Linux Kernel < 2.6.39.3 - Race Condition in KSM scan_get_next_rmap_item
Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging (KSM) is enabled, allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted application.
CVE-2013-0914 WRITEUP WRITEUP
Linux kernel <3.8.4 - Privilege Escalation
The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.
CVE-2013-2141 WRITEUP WRITEUP
Linux Kernel < 3.8.9 - Information Disclosure via Uninitialized Data Structure in do_tkill
The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call.
CVE-2013-4483 WRITEUP WRITEUP
Linux Kernel < 3.10 - Denial of Service via IPC Reference Count Mismanagement
The ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, which allows local users to cause a denial of service (memory consumption or system crash) via a crafted application.