CVE-2009-2695: Buffer Overflow
First published: Mon Aug 17 2009(Updated: )
Description of problem: Dan Walsh's blog post mentioned in the previous comment details selinux-policy part of the issue tracked via <a class="bz_bug_link bz_status_CLOSED bz_closed bz_public " title="CLOSED UPSTREAM - CVE-2009-1897 kernel: tun/tap: Fix crashes if open() /dev/net/tun and then poll() it" href="show_bug.cgi?id=512284">bug #512284</a>. As noted in the the blog, selinux-policy provides a boolean - allow_unconfined_mmap_low - which controls whether mmap_min_addr restriction is applied to the process. This boolean, however, did not work as expected, as unconfined_t domain (default domain for logged-in unprivileged users) was always permitted to map low memory pages regardless of the boolean setting. This problem with the boolean is being fixed and the fix will be included in future selinux-policy updates in RHEL5 and Fedora (see Dan's blog for NVRs). Few notes specific to Red Hat Enterprise Linux 5: Support for mmap_min_addr sysctl was not included in the GA version of RHEL5. It was only added in kernel update in 5.2 (it first appeared upstream in 2.6.24). selinux-policy was, to avoid breaking applications needing low memory pages mapping on upgrade from 5.1 to 5.2, configured to allow mmap_zero in unconfined domains and only disallow it in confined domains (e.g. various network facing services). In 5.3, allow_unconfined_mmap_low boolean was added, but it's default value for targeted policy was changed to on, i.e. allowing mmap_zero in all unconfined domains by default. This default boolean value is planned to remain unchanged in 5.4. It should also be noted, that even with allow_unconfined_mmap_low boolean set to off, it is still possible for unconfined_t user to transition to other domain that is permitted to mmap_zero, as details in the Dan's blog post. Upstream discussion on how to best address this issue is still ongoing. Eric's proposed patches moving mmap_min_addr check out of security were submitted. If they are accepted upstream, mmap_min_addr will be checked before LSM hooks are called. Security modules will only be consulted if mmap_min_addr check has passed (e.g. when mmap_min_addr is 0), so SELinux may still be able to restrict mapping of the low pages / zero page for confined domains and permit mapping in unconfined, even when mmap_min_addr is 0. Eric's patches with further discussion: <a href="http://patchwork.kernel.org/patch/36540/">http://patchwork.kernel.org/patch/36540/</a> <a href="http://patchwork.kernel.org/patch/36539/">http://patchwork.kernel.org/patch/36539/</a> Updated version: <a href="http://patchwork.kernel.org/patch/36650/">http://patchwork.kernel.org/patch/36650/</a> <a href="http://patchwork.kernel.org/patch/36649/">http://patchwork.kernel.org/patch/36649/</a> Further discussion of the proposed change: <a href="http://thread.gmane.org/gmane.linux.kernel.lsm/9075">http://thread.gmane.org/gmane.linux.kernel.lsm/9075</a> mmap_min_addr on SELinux and non-SELinux systems <a href="http://eparis.livejournal.com/606.html">http://eparis.livejournal.com/606.html</a> Confining the unconfined. Oxymoron? <a href="http://danwalsh.livejournal.com/30084.html">http://danwalsh.livejournal.com/30084.html</a> Kbase: <a href="http://kbase.redhat.com/faq/docs/DOC-18042">http://kbase.redhat.com/faq/docs/DOC-18042</a>
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | =2.6.27.29 | |
| Linux Linux kernel | =2.6.27.12 | |
| Linux Linux kernel | =2.6.20.6 | |
| Linux Linux kernel | =2.6.20.9 | |
| Linux Linux kernel | =2.6.11 | |
| Linux Linux kernel | =2.6.23.4 | |
| Linux Linux kernel | =2.6.22.15 | |
| Linux Linux kernel | =2.6.16.16 | |
| Linux Linux kernel | =2.6.18.7 | |
| Linux Linux kernel | =2.6.17.12 | |
| Linux Linux kernel | =2.6.16.39 | |
| Linux Linux kernel | =2.6.27.3 | |
| Linux Linux kernel | =2.6.29.3 | |
| Linux Linux kernel | =2.6.21 | |
| Linux Linux kernel | =2.6.16.9 | |
| Linux Linux kernel | =2.6.17.9 | |
| Linux Linux kernel | =2.6.11.2 | |
| Linux Linux kernel | =2.6.27.1 | |
| Linux Linux kernel | =2.6.5 | |
| Linux Linux kernel | =2.6.15.3 | |
| Linux Linux kernel | =2.6.27.30 | |
| Linux Linux kernel | =2.6.11.10 | |
| Linux Linux kernel | =2.6.24.7 | |
| Linux Linux kernel | =2.6.1 | |
| Linux Linux kernel | =2.6.16.43 | |
| Linux Linux kernel | =2.6.16.6 | |
| Linux Linux kernel | =2.6.16.8 | |
| Linux Linux kernel | =2.6.20.13 | |
| Linux Linux kernel | =2.6.22.4 | |
| Linux Linux kernel | =2.6.14.7 | |
| Linux Linux kernel | =2.6.27.18 | |
| Linux Linux kernel | =2.6.13 | |
| Linux Linux kernel | =2.6.17.2 | |
| Linux Linux kernel | =2.6.13.3 | |
| Linux Linux kernel | =2.6.23.13 | |
| Linux Linux kernel | =2.6.11.8 | |
| Linux Linux kernel | =2.6.24.2 | |
| Linux Linux kernel | =2.6.26.5 | |
| Linux Linux kernel | =2.6.16.34 | |
| Linux Linux kernel | =2.6.25.20 | |
| Linux Linux kernel | =2.6.27.21 | |
| Linux Linux kernel | =2.6.23.7 | |
| Linux Linux kernel | =2.6.17.8 | |
| Linux Linux kernel | =2.6.14.4 | |
| Linux Linux kernel | =2.6.14 | |
| Linux Linux kernel | =2.6.25.5 | |
| Linux Linux kernel | =2.6.17.4 | |
| Linux Linux kernel | =2.6.16.18 | |
| Linux Linux kernel | =2.6.27.27 | |
| Linux Linux kernel | =2.6.17.14 | |
| Linux Linux kernel | =2.6.10 | |
| Linux Linux kernel | =2.6.23.8 | |
| Linux Linux kernel | =2.6.16.45 | |
| Linux Linux kernel | =2.6.22.12 | |
| Linux Linux kernel | =2.6.25.18 | |
| Linux Linux kernel | =2.6.14.3 | |
| Linux Linux kernel | =2.6.29 | |
| Linux Linux kernel | =2.6.18.3 | |
| Linux Linux kernel | =2.6.16.37 | |
| Linux Linux kernel | =2.6.11.6 | |
| Linux Linux kernel | =2.6.16.48 | |
| Linux Linux kernel | =2.6.11.11 | |
| Linux Linux kernel | =2.6.16.13 | |
| Linux Linux kernel | =2.6.27.10 | |
| Linux Linux kernel | =2.6.3 | |
| Linux Linux kernel | =2.6.21.6 | |
| Linux Linux kernel | =2.6.26.6 | |
| Linux Linux kernel | =2.6.22.1 | |
| Linux Linux kernel | =2.6.27.17 | |
| Linux Linux kernel | =2.6.16.4 | |
| Linux Linux kernel | =2.6.23.16 | |
| Linux Linux kernel | =2.6.17.3 | |
| Linux Linux kernel | =2.6.24.1 | |
| Linux Linux kernel | =2.6.20.5 | |
| Linux Linux kernel | =2.6.22 | |
| Linux Linux kernel | =2.6.28.4 | |
| Linux Linux kernel | =2.6.4 | |
| Linux Linux kernel | =2.6.27.16 | |
| Linux Linux kernel | =2.6.26 | |
| Linux Linux kernel | =2.6.16.15 | |
| Linux Linux kernel | =2.6.27.20 | |
| Linux Linux kernel | =2.6.15.6 | |
| Linux Linux kernel | =2.6.26.3 | |
| Linux Linux kernel | =2.6.20.16 | |
| Linux Linux kernel | =2.6.15.1 | |
| Linux Linux kernel | =2.6.11.5 | |
| Linux Linux kernel | =2.6.28.2 | |
| Linux Linux kernel | =2.6.25.9 | |
| Linux Linux kernel | =2.6.19.3 | |
| Linux Linux kernel | =2.6.27.4 | |
| Linux Linux kernel | =2.6.27 | |
| Linux Linux kernel | =2.6.19.4 | |
| Linux Linux kernel | =2.6.25.13 | |
| Linux Linux kernel | =2.6.28.5 | |
| Linux Linux kernel | =2.6.19.1 | |
| Linux Linux kernel | =2.6.18.4 | |
| Linux Linux kernel | =2.6.16.1 | |
| Linux Linux kernel | =2.6.18.1 | |
| Linux Linux kernel | =2.6.20.21 | |
| Linux Linux kernel | =2.6.31-rc1 | |
| Linux Linux kernel | =2.6.27.13 | |
| Linux Linux kernel | =2.6.23.1 | |
| Linux Linux kernel | =2.6.2 | |
| Linux Linux kernel | =2.6.14.5 | |
| Linux Linux kernel | =2.6.13.2 | |
| Linux Linux kernel | =2.6.17.5 | |
| Linux Linux kernel | =2.6.18.5 | |
| Linux Linux kernel | =2.6.21.1 | |
| Linux Linux kernel | =2.6.16.32 | |
| Linux Linux kernel | =2.6.13.5 | |
| Linux Linux kernel | =2.6.16.57 | |
| Linux Linux kernel | =2.6.16.49 | |
| Linux Linux kernel | =2.6.25.3 | |
| Linux Linux kernel | =2.6.17 | |
| Linux Linux kernel | =2.6.24 | |
| Linux Linux kernel | =2.6.19.2 | |
| Linux Linux kernel | =2.6.26.2 | |
| Linux Linux kernel | =2.6.21.4 | |
| Linux Linux kernel | =2.6.16.11 | |
| Linux Linux kernel | =2.6.20.17 | |
| Linux Linux kernel | =2.6.16.14 | |
| Linux Linux kernel | =2.6.20.12 | |
| Linux Linux kernel | =2.6.16.25 | |
| Linux Linux kernel | =2.6.27.15 | |
| Linux Linux kernel | =2.6.16.21 | |
| Linux Linux kernel | =2.6.16.33 | |
| Linux Linux kernel | =2.6.8 | |
| Linux Linux kernel | =2.6.16.28 | |
| Linux Linux kernel | =2.6.17.10 | |
| Linux Linux kernel | =2.6.21.5 | |
| Linux Linux kernel | =2.6.25.15 | |
| Linux Linux kernel | =2.6.14.1 | |
| Linux Linux kernel | =2.6.23.15 | |
| Linux Linux kernel | =2.6.16.23 | |
| Linux Linux kernel | =2.6.29.4 | |
| Linux Linux kernel | =2.6.12.5 | |
| Linux Linux kernel | =2.6.15.7 | |
| Linux Linux kernel | =2.6.20 | |
| Linux Linux kernel | =2.6.23.10 | |
| Linux Linux kernel | =2.6.22.7 | |
| Linux Linux kernel | =2.6.27.26 | |
| Linux Linux kernel | =2.6.16.3 | |
| Linux Linux kernel | =2.6.27.8 | |
| Linux Linux kernel | =2.6.26.1 | |
| Linux Linux kernel | =2.6.25.19 | |
| Linux Linux kernel | =2.6.20.20 | |
| Linux Linux kernel | =2.6.16.36 | |
| Linux Linux kernel | =2.6.14.6 | |
| Linux Linux kernel | =2.6.12.1 | |
| Linux Linux kernel | =2.6.27.9 | |
| Linux Linux kernel | =2.6.11.9 | |
| Linux Linux kernel | =2.6.16.46 | |
| Linux Linux kernel | =2.6.17.1 | |
| Linux Linux kernel | =2.6.20.8 | |
| Linux Linux kernel | =2.6.27.25 | |
| Linux Linux kernel | =2.6.20.15 | |
| Linux Linux kernel | =2.6.22.18 | |
| Linux Linux kernel | =2.6.0 | |
| Linux Linux kernel | =2.6.25.8 | |
| Linux Linux kernel | =2.6.16.54 | |
| Linux Linux kernel | =2.6.13.4 | |
| Linux Linux kernel | =2.6.20.18 | |
| Linux Linux kernel | =2.6.23.9 | |
| Linux Linux kernel | =2.6.22.6 | |
| Linux Linux kernel | =2.6.23.3 | |
| Linux Linux kernel | =2.6.18.8 | |
| Linux Linux kernel | =2.6.22.3 | |
| Linux Linux kernel | =2.6.12.2 | |
| Linux Linux kernel | =2.6.16.31 | |
| Linux Linux kernel | =2.6.16.26 | |
| Linux Linux kernel | =2.6.16.62 | |
| Linux Linux kernel | =2.6.18.2 | |
| Linux Linux kernel | =2.6.28.8 | |
| Linux Linux kernel | =2.6.16.29 | |
| Linux Linux kernel | =2.6.29.1 | |
| Linux Linux kernel | =2.6.24.4 | |
| Linux Linux kernel | =2.6.27.19 | |
| Linux Linux kernel | <=2.6.31 | |
| Linux Linux kernel | =2.6.25.16 | |
| Linux Linux kernel | =2.6.22.9 | |
| Linux Linux kernel | =2.6.25.17 | |
| Linux Linux kernel | =2.6.20.11 | |
| Linux Linux kernel | =2.6.19 | |
| Linux Linux kernel | =2.6.20.3 | |
| Linux Linux kernel | =2.6.16 | |
| Linux Linux kernel | =2.6.30.4 | |
| Linux Linux kernel | =2.6.28.3 | |
| Linux Linux kernel | =2.6.22.13 | |
| Linux Linux kernel | =2.6.19.7 | |
| Linux Linux kernel | =2.6.21.3 | |
| Linux Linux kernel | =2.6.27.28 | |
| Linux Linux kernel | =2.6.24.5 | |
| Linux Linux kernel | =2.6.16.51 | |
| Linux Linux kernel | =2.6.15.2 | |
| Linux Linux kernel | =2.6.20.19 | |
| Linux Linux kernel | =2.6.16.22 | |
| Linux Linux kernel | =2.6.22.17 | |
| Linux Linux kernel | =2.6.16.58 | |
| Linux Linux kernel | =2.6.16.40 | |
| Linux Linux kernel | =2.6.16.47 | |
| Linux Linux kernel | =2.6.16.42 | |
| Linux Linux kernel | =2.6.27.22 | |
| Linux Linux kernel | =2.6.23.14 | |
| Linux Linux kernel | =2.6.17.11 | |
| Linux Linux kernel | =2.6.16.10 | |
| Linux Linux kernel | =2.6.12.4 | |
| Linux Linux kernel | =2.6.16.41 | |
| Linux Linux kernel | =2.6.16.52 | |
| Linux Linux kernel | =2.6.11.3 | |
| Linux Linux kernel | =2.6.20.10 | |
| Linux Linux kernel | =2.6.16.24 | |
| Linux Linux kernel | =2.6.25.10 | |
| Linux Linux kernel | =2.6.22.11 | |
| Linux Linux kernel | =2.6.16.55 | |
| Linux Linux kernel | =2.6.23 | |
| Linux Linux kernel | =2.6.12.3 | |
| Linux Linux kernel | =2.6.22.10 | |
| Linux Linux kernel | =2.6.29.6 | |
| Linux Linux kernel | =2.6.23.17 | |
| Linux Linux kernel | =2.6.27.5 | |
| Linux Linux kernel | =2.6.23.2 | |
| Linux Linux kernel | =2.6.25.1 | |
| Linux Linux kernel | =2.6.25.4 | |
| Linux Linux kernel | =2.6.28.9 | |
| Linux Linux kernel | =2.6.30.2 | |
| Linux Linux kernel | =2.6.7 | |
| Linux Linux kernel | =2.6.21.7 | |
| Linux Linux kernel | =2.6.16.30 | |
| Linux Linux kernel | =2.6.21.2 | |
| Linux Linux kernel | =2.6.15.4 | |
| Linux Linux kernel | =2.6.27.7 | |
| Linux Linux kernel | =2.6.16.59 | |
| Linux Linux kernel | =2.6.30.1 | |
| Linux Linux kernel | =2.6.16.38 | |
| Linux Linux kernel | =2.6.16.17 | |
| Linux Linux kernel | =2.6.26.8 | |
| Linux Linux kernel | =2.6.20.2 | |
| Linux Linux kernel | =2.6.28.6 | |
| Linux Linux kernel | =2.6.16.12 | |
| Linux Linux kernel | =2.6.16.27 | |
| Linux Linux kernel | =2.6.16.53 | |
| Linux Linux kernel | =2.6.28.7 | |
| Linux Linux kernel | =2.6.12.6 | |
| Linux Linux kernel | =2.6.17.7 | |
| Linux Linux kernel | =2.6.20.1 | |
| Linux Linux kernel | =2.6.11.7 | |
| Linux Linux kernel | =2.6.16.2 | |
| Linux Linux kernel | =2.6.24.6 | |
| Linux Linux kernel | =2.6.31-rc3 | |
| Linux Linux kernel | =2.6.18.6 | |
| Linux Linux kernel | =2.6.15 | |
| Linux Linux kernel | =2.6.16.44 | |
| Linux Linux kernel | =2.6.23.12 | |
| Linux Linux kernel | =2.6.16.35 | |
| Linux Linux kernel | =2.6.19.6 | |
| Linux Linux kernel | =2.6.16.50 | |
| Linux Linux kernel | =2.6.25.11 | |
| Linux Linux kernel | =2.6.27.31 | |
| Linux Linux kernel | =2.6.29.2 | |
| Linux Linux kernel | =2.6.23.5 | |
| Linux Linux kernel | =2.6.22.8 | |
| Linux Linux kernel | =2.6.14.2 | |
| Linux Linux kernel | =2.6.16.61 | |
| Linux Linux kernel | =2.6.31-rc2 | |
| Linux Linux kernel | =2.6.19.5 | |
| Linux Linux kernel | =2.6.18 | |
| Linux Linux kernel | =2.6.27.24 | |
| Linux Linux kernel | =2.6.20.4 | |
| Linux Linux kernel | =2.6.17.6 | |
| Linux Linux kernel | =2.6.23.6 | |
| Linux Linux kernel | =2.6.27.2 | |
| Linux Linux kernel | =2.6.16.7 | |
| Linux Linux kernel | =2.6.17.13 | |
| Linux Linux kernel | =2.6.16.60 | |
| Linux Linux kernel | =2.6.22.2 | |
| Linux Linux kernel | =2.6.8.1 | |
| Linux Linux kernel | =2.6.27.11 | |
| Linux Linux kernel | =2.6.16.56 | |
| Linux Linux kernel | =2.6.22.19 | |
| Linux Linux kernel | =2.6.24.3 | |
| Linux Linux kernel | =2.6.25 | |
| Linux Linux kernel | =2.6.20.14 | |
| Linux Linux kernel | =2.6.25.2 | |
| Linux Linux kernel | =2.6.22.5 | |
| Linux Linux kernel | =2.6.25.7 | |
| Linux Linux kernel | =2.6.30.5 | |
| Linux Linux kernel | =2.6.25.14 | |
| Linux Linux kernel | =2.6.20.7 | |
| Linux Linux kernel | =2.6.28.1 | |
| Linux Linux kernel | =2.6.16.5 | |
| Linux Linux kernel | =2.6.30 | |
| Linux Linux kernel | =2.6.11.4 | |
| Linux Linux kernel | =2.6.26.4 | |
| Linux Linux kernel | =2.6.25.12 | |
| Linux Linux kernel | =2.6.16.19 | |
| Linux Linux kernel | =2.6.27.6 | |
| Linux Linux kernel | =2.6.26.7 | |
| Linux Linux kernel | =2.6.25.6 | |
| Linux Linux kernel | =2.6.11.12 | |
| Linux Linux kernel | =2.6.16.20 | |
| Linux Linux kernel | =2.6.15.5 | |
| Linux Linux kernel | =2.6.28.10 | |
| Linux Linux kernel | =2.6.22.16 | |
| Linux Linux kernel | =2.6.11.1 | |
| Linux Linux kernel | =2.6.30.3 | |
| Linux Linux kernel | =2.6.9 | |
| Linux Linux kernel | =2.6.27.23 | |
| Linux Linux kernel | =2.6.13.1 | |
| Linux Linux kernel | =2.6.23.11 | |
| Linux Linux kernel | =2.6.27.14 | |
| Linux Linux kernel | =2.6.28 | |
| Linux Linux kernel | =2.6.29.5 | |
| Linux Linux kernel | =2.6.22.14 | |
| Linux Linux kernel | =2.6.6 | |
| Linux Linux kernel | =2.6.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git;a=commit;h=a2551df7ec568d87793d2eea4ca744e86318f205
- http://danwalsh.livejournal.com/30084.html
- http://thread.gmane.org/gmane.linux.kernel.lsm/9075
- http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git;a=commit;h=7c73875e7dda627040b12c19b01db634fa7f0fd1
- http://eparis.livejournal.com/606.html
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ab5a91a8364c3d6fc617abc47cc81d162c01d90a
- http://patchwork.kernel.org/patch/36540/
- http://www.openwall.com/lists/oss-security/2009/08/17/4
- http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git;a=commit;h=47d439e9fb8a81a90022cfa785bf1c36c4e2aff6
- http://patchwork.kernel.org/patch/36539/
- http://secunia.com/advisories/36501
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8cf948e744e0218af604c32edecde10006dc8e9e
- http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git;a=commit;h=84336d1a77ccd2c06a730ddd38e695c2324a7386
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1d9959734a1949ea4f2427bd2d8b21ede6b2441c
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7
- http://patchwork.kernel.org/patch/36650/
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=788084aba2ab7348257597496befcbccabdc98a3
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9c0d90103c7e0eb6e638e5b649e9f6d8d9c1b4b3
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html
- http://kbase.redhat.com/faq/docs/DOC-18042
- http://twitter.com/spendergrsec/statuses/3303390960
- http://patchwork.kernel.org/patch/36649/
- https://bugzilla.redhat.com/show_bug.cgi?id=511143
- http://www.securityfocus.com/bid/36051
- https://bugzilla.redhat.com/show_bug.cgi?id=517830
- https://rhn.redhat.com/errata/RHSA-2009-1540.html
- https://rhn.redhat.com/errata/RHSA-2009-1548.html
- http://www.redhat.com/support/errata/RHSA-2009-1672.html
- http://www.debian.org/security/2010/dsa-2005
- http://secunia.com/advisories/38834
- http://www.vupen.com/english/advisories/2010/0528
- http://lists.vmware.com/pipermail/security-announce/2010/000082.html
- http://secunia.com/advisories/38794
- http://secunia.com/advisories/37105
- http://www.ubuntu.com/usn/USN-852-1
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9882
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7144
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=512284
- http://git.kernel.org/linus/9c0d90103c7e0eb6e638e5b649e9f6d8d9c1b4b3
- http://git.kernel.org/linus/8cf948e744e0218af604c32edecde10006dc8e9e
- http://git.kernel.org/linus/788084aba2ab7348257597496befcbccabdc98a3
- http://git.kernel.org/linus/1d9959734a1949ea4f2427bd2d8b21ede6b2441c
- https://rhn.redhat.com/errata/RHSA-2009-1587.html
- https://rhn.redhat.com/errata/RHSA-2009-1672.html
- http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=47d439e9fb8a81a90022cfa785bf1c36c4e2aff6
- http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=7c73875e7dda627040b12c19b01db634fa7f0fd1
- http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=84336d1a77ccd2c06a730ddd38e695c2324a7386
- http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=a2551df7ec568d87793d2eea4ca744e86318f205
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d9959734a1949ea4f2427bd2d8b21ede6b2441c
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=788084aba2ab7348257597496befcbccabdc98a3
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8cf948e744e0218af604c32edecde10006dc8e9e
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c0d90103c7e0eb6e638e5b649e9f6d8d9c1b4b3
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ab5a91a8364c3d6fc617abc47cc81d162c01d90a
- collector/nvd-historical
- collector/nvd-index
- collector/nvd-api
- agent/weakness
- agent/author
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/tags
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2009-2695
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/2.6.27.29
- version/linux linux kernel/2.6.27.12
- version/linux linux kernel/2.6.20.6
- version/linux linux kernel/2.6.20.9
- version/linux linux kernel/2.6.11
- version/linux linux kernel/2.6.23.4
- version/linux linux kernel/2.6.22.15
- version/linux linux kernel/2.6.16.16
- version/linux linux kernel/2.6.18.7
- version/linux linux kernel/2.6.17.12
- version/linux linux kernel/2.6.16.39
- version/linux linux kernel/2.6.27.3
- version/linux linux kernel/2.6.29.3
- version/linux linux kernel/2.6.21
- version/linux linux kernel/2.6.16.9
- version/linux linux kernel/2.6.17.9
- version/linux linux kernel/2.6.11.2
- version/linux linux kernel/2.6.27.1
- version/linux linux kernel/2.6.5
- version/linux linux kernel/2.6.15.3
- version/linux linux kernel/2.6.27.30
- version/linux linux kernel/2.6.11.10
- version/linux linux kernel/2.6.24.7
- version/linux linux kernel/2.6.1
- version/linux linux kernel/2.6.16.43
- version/linux linux kernel/2.6.16.6
- version/linux linux kernel/2.6.16.8
- version/linux linux kernel/2.6.20.13
- version/linux linux kernel/2.6.22.4
- version/linux linux kernel/2.6.14.7
- version/linux linux kernel/2.6.27.18
- version/linux linux kernel/2.6.13
- version/linux linux kernel/2.6.17.2
- version/linux linux kernel/2.6.13.3
- version/linux linux kernel/2.6.23.13
- version/linux linux kernel/2.6.11.8
- version/linux linux kernel/2.6.24.2
- version/linux linux kernel/2.6.26.5
- version/linux linux kernel/2.6.16.34
- version/linux linux kernel/2.6.25.20
- version/linux linux kernel/2.6.27.21
- version/linux linux kernel/2.6.23.7
- version/linux linux kernel/2.6.17.8
- version/linux linux kernel/2.6.14.4
- version/linux linux kernel/2.6.14
- version/linux linux kernel/2.6.25.5
- version/linux linux kernel/2.6.17.4
- version/linux linux kernel/2.6.16.18
- version/linux linux kernel/2.6.27.27
- version/linux linux kernel/2.6.17.14
- version/linux linux kernel/2.6.10
- version/linux linux kernel/2.6.23.8
- version/linux linux kernel/2.6.16.45
- version/linux linux kernel/2.6.22.12
- version/linux linux kernel/2.6.25.18
- version/linux linux kernel/2.6.14.3
- version/linux linux kernel/2.6.29
- version/linux linux kernel/2.6.18.3
- version/linux linux kernel/2.6.16.37
- version/linux linux kernel/2.6.11.6
- version/linux linux kernel/2.6.16.48
- version/linux linux kernel/2.6.11.11
- version/linux linux kernel/2.6.16.13
- version/linux linux kernel/2.6.27.10
- version/linux linux kernel/2.6.3
- version/linux linux kernel/2.6.21.6
- version/linux linux kernel/2.6.26.6
- version/linux linux kernel/2.6.22.1
- version/linux linux kernel/2.6.27.17
- version/linux linux kernel/2.6.16.4
- version/linux linux kernel/2.6.23.16
- version/linux linux kernel/2.6.17.3
- version/linux linux kernel/2.6.24.1
- version/linux linux kernel/2.6.20.5
- version/linux linux kernel/2.6.22
- version/linux linux kernel/2.6.28.4
- version/linux linux kernel/2.6.4
- version/linux linux kernel/2.6.27.16
- version/linux linux kernel/2.6.26
- version/linux linux kernel/2.6.16.15
- version/linux linux kernel/2.6.27.20
- version/linux linux kernel/2.6.15.6
- version/linux linux kernel/2.6.26.3
- version/linux linux kernel/2.6.20.16
- version/linux linux kernel/2.6.15.1
- version/linux linux kernel/2.6.11.5
- version/linux linux kernel/2.6.28.2
- version/linux linux kernel/2.6.25.9
- version/linux linux kernel/2.6.19.3
- version/linux linux kernel/2.6.27.4
- version/linux linux kernel/2.6.27
- version/linux linux kernel/2.6.19.4
- version/linux linux kernel/2.6.25.13
- version/linux linux kernel/2.6.28.5
- version/linux linux kernel/2.6.19.1
- version/linux linux kernel/2.6.18.4
- version/linux linux kernel/2.6.16.1
- version/linux linux kernel/2.6.18.1
- version/linux linux kernel/2.6.20.21
- version/linux linux kernel/2.6.31-rc1
- version/linux linux kernel/2.6.27.13
- version/linux linux kernel/2.6.23.1
- version/linux linux kernel/2.6.2
- version/linux linux kernel/2.6.14.5
- version/linux linux kernel/2.6.13.2
- version/linux linux kernel/2.6.17.5
- version/linux linux kernel/2.6.18.5
- version/linux linux kernel/2.6.21.1
- version/linux linux kernel/2.6.16.32
- version/linux linux kernel/2.6.13.5
- version/linux linux kernel/2.6.16.57
- version/linux linux kernel/2.6.16.49
- version/linux linux kernel/2.6.25.3
- version/linux linux kernel/2.6.17
- version/linux linux kernel/2.6.24
- version/linux linux kernel/2.6.19.2
- version/linux linux kernel/2.6.26.2
- version/linux linux kernel/2.6.21.4
- version/linux linux kernel/2.6.16.11
- version/linux linux kernel/2.6.20.17
- version/linux linux kernel/2.6.16.14
- version/linux linux kernel/2.6.20.12
- version/linux linux kernel/2.6.16.25
- version/linux linux kernel/2.6.27.15
- version/linux linux kernel/2.6.16.21
- version/linux linux kernel/2.6.16.33
- version/linux linux kernel/2.6.8
- version/linux linux kernel/2.6.16.28
- version/linux linux kernel/2.6.17.10
- version/linux linux kernel/2.6.21.5
- version/linux linux kernel/2.6.25.15
- version/linux linux kernel/2.6.14.1
- version/linux linux kernel/2.6.23.15
- version/linux linux kernel/2.6.16.23
- version/linux linux kernel/2.6.29.4
- version/linux linux kernel/2.6.12.5
- version/linux linux kernel/2.6.15.7
- version/linux linux kernel/2.6.20
- version/linux linux kernel/2.6.23.10
- version/linux linux kernel/2.6.22.7
- version/linux linux kernel/2.6.27.26
- version/linux linux kernel/2.6.16.3
- version/linux linux kernel/2.6.27.8
- version/linux linux kernel/2.6.26.1
- version/linux linux kernel/2.6.25.19
- version/linux linux kernel/2.6.20.20
- version/linux linux kernel/2.6.16.36
- version/linux linux kernel/2.6.14.6
- version/linux linux kernel/2.6.12.1
- version/linux linux kernel/2.6.27.9
- version/linux linux kernel/2.6.11.9
- version/linux linux kernel/2.6.16.46
- version/linux linux kernel/2.6.17.1
- version/linux linux kernel/2.6.20.8
- version/linux linux kernel/2.6.27.25
- version/linux linux kernel/2.6.20.15
- version/linux linux kernel/2.6.22.18
- version/linux linux kernel/2.6.0
- version/linux linux kernel/2.6.25.8
- version/linux linux kernel/2.6.16.54
- version/linux linux kernel/2.6.13.4
- version/linux linux kernel/2.6.20.18
- version/linux linux kernel/2.6.23.9
- version/linux linux kernel/2.6.22.6
- version/linux linux kernel/2.6.23.3
- version/linux linux kernel/2.6.18.8
- version/linux linux kernel/2.6.22.3
- version/linux linux kernel/2.6.12.2
- version/linux linux kernel/2.6.16.31
- version/linux linux kernel/2.6.16.26
- version/linux linux kernel/2.6.16.62
- version/linux linux kernel/2.6.18.2
- version/linux linux kernel/2.6.28.8
- version/linux linux kernel/2.6.16.29
- version/linux linux kernel/2.6.29.1
- version/linux linux kernel/2.6.24.4
- version/linux linux kernel/2.6.27.19
- version/linux linux kernel/2.6.31
- version/linux linux kernel/2.6.25.16
- version/linux linux kernel/2.6.22.9
- version/linux linux kernel/2.6.25.17
- version/linux linux kernel/2.6.20.11
- version/linux linux kernel/2.6.19
- version/linux linux kernel/2.6.20.3
- version/linux linux kernel/2.6.16
- version/linux linux kernel/2.6.30.4
- version/linux linux kernel/2.6.28.3
- version/linux linux kernel/2.6.22.13
- version/linux linux kernel/2.6.19.7
- version/linux linux kernel/2.6.21.3
- version/linux linux kernel/2.6.27.28
- version/linux linux kernel/2.6.24.5
- version/linux linux kernel/2.6.16.51
- version/linux linux kernel/2.6.15.2
- version/linux linux kernel/2.6.20.19
- version/linux linux kernel/2.6.16.22
- version/linux linux kernel/2.6.22.17
- version/linux linux kernel/2.6.16.58
- version/linux linux kernel/2.6.16.40
- version/linux linux kernel/2.6.16.47
- version/linux linux kernel/2.6.16.42
- version/linux linux kernel/2.6.27.22
- version/linux linux kernel/2.6.23.14
- version/linux linux kernel/2.6.17.11
- version/linux linux kernel/2.6.16.10
- version/linux linux kernel/2.6.12.4
- version/linux linux kernel/2.6.16.41
- version/linux linux kernel/2.6.16.52
- version/linux linux kernel/2.6.11.3
- version/linux linux kernel/2.6.20.10
- version/linux linux kernel/2.6.16.24
- version/linux linux kernel/2.6.25.10
- version/linux linux kernel/2.6.22.11
- version/linux linux kernel/2.6.16.55
- version/linux linux kernel/2.6.23
- version/linux linux kernel/2.6.12.3
- version/linux linux kernel/2.6.22.10
- version/linux linux kernel/2.6.29.6
- version/linux linux kernel/2.6.23.17
- version/linux linux kernel/2.6.27.5
- version/linux linux kernel/2.6.23.2
- version/linux linux kernel/2.6.25.1
- version/linux linux kernel/2.6.25.4
- version/linux linux kernel/2.6.28.9
- version/linux linux kernel/2.6.30.2
- version/linux linux kernel/2.6.7
- version/linux linux kernel/2.6.21.7
- version/linux linux kernel/2.6.16.30
- version/linux linux kernel/2.6.21.2
- version/linux linux kernel/2.6.15.4
- version/linux linux kernel/2.6.27.7
- version/linux linux kernel/2.6.16.59
- version/linux linux kernel/2.6.30.1
- version/linux linux kernel/2.6.16.38
- version/linux linux kernel/2.6.16.17
- version/linux linux kernel/2.6.26.8
- version/linux linux kernel/2.6.20.2
- version/linux linux kernel/2.6.28.6
- version/linux linux kernel/2.6.16.12
- version/linux linux kernel/2.6.16.27
- version/linux linux kernel/2.6.16.53
- version/linux linux kernel/2.6.28.7
- version/linux linux kernel/2.6.12.6
- version/linux linux kernel/2.6.17.7
- version/linux linux kernel/2.6.20.1
- version/linux linux kernel/2.6.11.7
- version/linux linux kernel/2.6.16.2
- version/linux linux kernel/2.6.24.6
- version/linux linux kernel/2.6.31-rc3
- version/linux linux kernel/2.6.18.6
- version/linux linux kernel/2.6.15
- version/linux linux kernel/2.6.16.44
- version/linux linux kernel/2.6.23.12
- version/linux linux kernel/2.6.16.35
- version/linux linux kernel/2.6.19.6
- version/linux linux kernel/2.6.16.50
- version/linux linux kernel/2.6.25.11
- version/linux linux kernel/2.6.27.31
- version/linux linux kernel/2.6.29.2
- version/linux linux kernel/2.6.23.5
- version/linux linux kernel/2.6.22.8
- version/linux linux kernel/2.6.14.2
- version/linux linux kernel/2.6.16.61
- version/linux linux kernel/2.6.31-rc2
- version/linux linux kernel/2.6.19.5
- version/linux linux kernel/2.6.18
- version/linux linux kernel/2.6.27.24
- version/linux linux kernel/2.6.20.4
- version/linux linux kernel/2.6.17.6
- version/linux linux kernel/2.6.23.6
- version/linux linux kernel/2.6.27.2
- version/linux linux kernel/2.6.16.7
- version/linux linux kernel/2.6.17.13
- version/linux linux kernel/2.6.16.60
- version/linux linux kernel/2.6.22.2
- version/linux linux kernel/2.6.8.1
- version/linux linux kernel/2.6.27.11
- version/linux linux kernel/2.6.16.56
- version/linux linux kernel/2.6.22.19
- version/linux linux kernel/2.6.24.3
- version/linux linux kernel/2.6.25
- version/linux linux kernel/2.6.20.14
- version/linux linux kernel/2.6.25.2
- version/linux linux kernel/2.6.22.5
- version/linux linux kernel/2.6.25.7
- version/linux linux kernel/2.6.30.5
- version/linux linux kernel/2.6.25.14
- version/linux linux kernel/2.6.20.7
- version/linux linux kernel/2.6.28.1
- version/linux linux kernel/2.6.16.5
- version/linux linux kernel/2.6.30
- version/linux linux kernel/2.6.11.4
- version/linux linux kernel/2.6.26.4
- version/linux linux kernel/2.6.25.12
- version/linux linux kernel/2.6.16.19
- version/linux linux kernel/2.6.27.6
- version/linux linux kernel/2.6.26.7
- version/linux linux kernel/2.6.25.6
- version/linux linux kernel/2.6.11.12
- version/linux linux kernel/2.6.16.20
- version/linux linux kernel/2.6.15.5
- version/linux linux kernel/2.6.28.10
- version/linux linux kernel/2.6.22.16
- version/linux linux kernel/2.6.11.1
- version/linux linux kernel/2.6.30.3
- version/linux linux kernel/2.6.9
- version/linux linux kernel/2.6.27.23
- version/linux linux kernel/2.6.13.1
- version/linux linux kernel/2.6.23.11
- version/linux linux kernel/2.6.27.14
- version/linux linux kernel/2.6.28
- version/linux linux kernel/2.6.29.5
- version/linux linux kernel/2.6.22.14
- version/linux linux kernel/2.6.6
- version/linux linux kernel/2.6.12