Alexander Nyberg

Name of the Vulnerable Software and Affected Versions: I2C for Linux versions 2.6.x before 2.6.11.8 I2C for Linux versions 2.6.12 before 2.6.12-rc2 Description: The issue allows local users to cause a denial of service by consuming CPU resources. This is achieved by attempting to write to the sysfs "alarms" file, which has write permissions but lacks an associated store function. Recommendations: For I2C for Linux versions 2.6.x before 2.6.11.8, update to version 2.6.11.8 or later. For I2C for Linux versions 2.6.12 before 2.6.12-rc2, update to version 2.6.12-rc2 or later.

**Name of the Vulnerable Software and Affected Versions** Debian GNU/Linux kernel-image-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux kernel-headers-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux kernel-pcmcia-modules-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux kernel-patch-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux kernel-build-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux kernel-doc-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux kernel-tree-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux kernel-source-2.4.27 versions 2.4.27 through 2.4.27-2 Linux kernel version 2.6.8.1 **Description** The issue is related to multiple vulnerabilities in the Debian GNU/Linux kernel packages, which can lead to a denial of service (kernel crash) when exploited. The vulnerabilities can be exploited remotely. The ptrace system call in the Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, allowing local users to cause a denial of service. **Recommendations** For Debian GNU/Linux kernel-image-2.4.27 versions 2.4.27 through 2.4.27-2, update to a newer version. For Debian GNU/Linux kernel-headers-2.4.27 versions 2.4.27 through 2.4.27-2, update to a newer version. For Debian GNU/Linux kernel-pcmcia-modules-2.4.27 versions 2.4.27 through 2.4.27-2, update to a newer version. For Debian GNU/Linux kernel-patch-2.4.27 versions 2.4.27 through 2.4.27-2, update to a newer version. For Debian GNU/Linux kernel-build-2.4.27 versions 2.4.27 through 2.4.27-2, update to a newer version. For Debian GNU/Linux kernel-doc-2.4.27 versions 2.4.27 through 2.4.27-2, update to a newer version. For Debian GNU/Linux kernel-tree-2.4.27 versions 2.4.27 through 2.4.27-2, update to a newer version. For Debian GNU/Linux kernel-source-2.4.27 versions 2.4.27 through 2.4.27-2, update to a newer version. For Linux kernel version 2.6.8.1, update to a newer version.