• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Linux Kernel 'sock_sendpage()' NULL Pointer Dereference Vulnerability

References:

• ASA-2009-380 (Avaya)
  
• ASA-2009-394 (Avaya)
  
• Bug 516949 â?? CVE-2009-2692 kernel: uninit op in SOCKOPS_WRAP() leads to privesc (Eugene Te)
  
• ChangeLog-2.4.37.5 (Linux)
  
• ChangeLog-2.6.31-rc6 (Linux)
  
• doesn't leak anything, so I think it's OK to make this public now: http://bit.ly (Brad Spengler)
  
• Linux kernel Homepage (kernel.org)
  
• Linux NULL pointer dereference due to incorrect proto_ops initializations (CVE-2 (Julien Tinnes)
  
• Make sock_sendpage() use kernel_sendpage() (Linus Torvalds)
  
• net: fix possible NULL dereference in sock_sendpage() (Willy Tarreau)
  
• New version up at http://bit.ly/Yzd0A (Brad Spengler)
  
• [UPRSN] Ubuntu Privacy Remix 9.04r2 fixes security issues (Ubuntu Privacy Remix Team )
  
• Linux NULL pointer dereference due to incorrect proto_ops initializations (Tavis Ormandy )
  
• Re: Linux NULL pointer dereference due to incorrect proto_ops initializations (Przemyslaw Frasunek )
  
• VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release addre (VMware Security Team )
  
• ASA-2009-446 kernel security update (RHSA-2009-1457) (Avaya)
  
• ASA-2009-464 (Avaya)
  
• Mandriva Linux Security Advisory MDVSA-2009:205 - kernel (Mandriva)