The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.

The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.

kernel: usb: buffer overflow in auerswald_probe() kernel: tpm infoleaks kernel: cifs session reuse kernel: ecryptfs: mount source TOCTOU race kernel: taskstats: duplicate entries in listener mode can lead to DoS kernel: mm: avoid wrapping vm_pgoff in mremap() and stack expansions kernel: ext4: kernel panic when writing data to the last block of sparse file kernel: ipv6: make fragment identifications less predictable kernel: gro: only reset frag0 when skb can be pulled kernel: bridge: null pointer dereference in __br_deliver kernel: xen: IOMMU fault livelock kernel: net: improve sequence number generation kernel: cifs: signedness issue in CIFSFindNext() kernel: panic occurs when clock_gettime() is called kernel: be2net: promiscuous mode and non-member VLAN packets DoS

Security update for Kernel