Doug Chapman

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.14 **Description** The issue allows local users to cause a denial of service, resulting in a system panic, by making certain socket calls that lead to inconsistent reference counts for loadable protocol modules in the atm module. **Recommendations** For Linux kernel versions prior to 2.6.14, update to version 2.6.14 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Debian GNU/Linux kernel versions prior to 2.4.33.6 Red Hat Enterprise Linux kernel versions prior to 2.4.33.6 **Description** The issue affects the Linux kernel and can lead to a disruption of protected information. The vulnerabilities can be exploited remotely. **Recommendations** For Debian GNU/Linux kernel versions prior to 2.4.33.6, update to version 2.4.33.6 or later. For Red Hat Enterprise Linux kernel versions prior to 2.4.33.6, update to version 2.4.33.6 or later. As a temporary workaround, consider restricting access to the vulnerable components until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Debian GNU/Linux kernel versions prior to 2.6.9 **Description** The issue affects the Linux kernel in Debian GNU/Linux, allowing local users to cause a denial of service via unspecified attack vectors. The vulnerability can be exploited remotely. It may lead to a violation of confidentiality, integrity, and availability of protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.15 **Description** The issue affects the Linux kernel and can lead to a denial of service (panic) when a page fault occurs due to a set mempolicy call with a 0 bitmask. This can be exploited by local users, potentially disrupting the confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.