Linux Kernel 'sock_sendpage()' NULL Pointer Dereference Vulnerability

Linux Kernel 'sock_sendpage()' NULL Pointer Dereference Vulnerability

References:

ASA-2009-380 (Avaya)
ASA-2009-394 (Avaya)
Bug 516949 â?? CVE-2009-2692 kernel: uninit op in SOCKOPS_WRAP() leads to privesc (Eugene Te)
ChangeLog-2.4.37.5 (Linux)
ChangeLog-2.6.31-rc6 (Linux)
doesn't leak anything, so I think it's OK to make this public now: http://bit.ly (Brad Spengler)
Linux kernel Homepage (kernel.org)
Linux NULL pointer dereference due to incorrect proto_ops initializations (CVE-2 (Julien Tinnes)
Make sock_sendpage() use kernel_sendpage() (Linus Torvalds)
net: fix possible NULL dereference in sock_sendpage() (Willy Tarreau)
New version up at http://bit.ly/Yzd0A (Brad Spengler)
VMware ESX 3.5, Patch ESX350-201006401-SG: Updates VMkernel, VMware Tools, hostd (VMware)
[UPRSN] Ubuntu Privacy Remix 9.04r2 fixes security issues (Ubuntu Privacy Remix Team )
Linux NULL pointer dereference due to incorrect proto_ops initializations (Tavis Ormandy )
Re: Linux NULL pointer dereference due to incorrect proto_ops initializations (Przemyslaw Frasunek )
VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release addre (VMware Security Team )
ASA-2009-446 kernel security update (RHSA-2009-1457) (Avaya)
ASA-2009-464 (Avaya)
Mandriva Linux Security Advisory MDVSA-2009:205 - kernel (Mandriva)
VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel (VMware)

Privacy Statement
Copyright 2010, SecurityFocus