xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version

Linux Syn 过滤可绕过漏洞


发布时间:2001-11-08
更新时间:2001-11-08
严重程度:
威胁程度:欺骗
错误类型:设计错误
利用方式:服务器模式

受影响系统
Linux kernel 2.0
Linux kernel 2.0.1
Linux kernel 2.0.2
Linux kernel 2.0.3
Linux kernel 2.0.4
Linux kernel 2.0.5
Linux kernel 2.0.6
Linux kernel 2.0.7
Linux kernel 2.0.8
Linux kernel 2.0.9
Linux kernel 2.0.10
Linux kernel 2.0.11
Linux kernel 2.0.12
Linux kernel 2.0.13
Linux kernel 2.0.14
Linux kernel 2.0.15
Linux kernel 2.0.16
Linux kernel 2.0.17
Linux kernel 2.0.18
Linux kernel 2.0.19
Linux kernel 2.0.20
Linux kernel 2.0.21
Linux kernel 2.0.22
Linux kernel 2.0.23
Linux kernel 2.0.24
Linux kernel 2.0.25
Linux kernel 2.0.26
Linux kernel 2.0.27
Linux kernel 2.0.28
Linux kernel 2.0.29
Linux kernel 2.0.30
Linux kernel 2.0.31
Linux kernel 2.0.32
Linux kernel 2.0.33
Linux kernel 2.0.34
Linux kernel 2.0.35
Linux kernel 2.0.36
Linux kernel 2.0.37
Linux kernel 2.0.38
Linux kernel 2.0.39
Linux kernel 2.2
Linux kernel 2.2.1
Linux kernel 2.2.2
Linux kernel 2.2.3
Linux kernel 2.2.4
Linux kernel 2.2.5
Linux kernel 2.2.6
Linux kernel 2.2.7
Linux kernel 2.2.8
Linux kernel 2.2.9
Linux kernel 2.2.10
   - Caldera OpenLinux 2.3
Linux kernel 2.2.11
Linux kernel 2.2.12
Linux kernel 2.2.13
   - S.u.S.E. Linux 6.3
   - S.u.S.E. Linux 6.4
Linux kernel 2.2.14
   - Caldera eDesktop 2.4
   - Caldera eServer 2.3.1
   - RedHat Linux 6.2
Linux kernel 2.2.15
Linux kernel 2.2.16
   - RedHat Linux 7.0
Linux kernel 2.2.17
   - S.u.S.E. Linux 7.0
Linux kernel 2.2.18
   - Wirex Immunix OS 6.2
   - Wirex Immunix OS 7.0
   - Wirex Immunix OS 7.0-Beta
Linux kernel 2.2.19
   - EnGarde Secure Linux 1.0.1
   - S.u.S.E. Linux 6.3
   - S.u.S.E. Linux 6.4
   - S.u.S.E. Linux 7.0
Linux kernel 2.2.20
Linux kernel 2.4
Linux kernel 2.4.1
Linux kernel 2.4.2
   - Caldera OpenLinux Server 3.1
   - Caldera OpenLinux Workstation 3.1
   - RedHat Linux 7.1
Linux kernel 2.4.3
Linux kernel 2.4.4
Linux kernel 2.4.5
   - Slackware Linux 8.0
Linux kernel 2.4.6
Linux kernel 2.4.7
   - RedHat Linux 7.2
   - S.u.S.E. Linux 7.1
   - S.u.S.E. Linux 7.2
Linux kernel 2.4.8
Linux kernel 2.4.9
Linux kernel 2.4.10
   - S.u.S.E. Linux 7.3
Linux kernel 2.4.11
Linux kernel 2.4.12
Linux kernel 2.4.13
详细描述
在包过滤中如果SYN COOKIE选项使用的话可以导致攻击者绕过部分规则。

当进程在SYN-FLOOD保护模式连接请求时,带syn标志设置的TCP包的过滤规则 会不正确的处理,如果攻击者可以猜测合法的SYN COOKIE响应,就可以导致访问防火墙的部分服务。

测试代码
尚无

解决方案
临时方法:
echo 0 > /proc/sys/net/ipv4/tcp_syncookies

升级系统:

Caldera Upgrade 2.3 i386 linux-kernel-binary-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 i386 linux-kernel-doc-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 i386 linux-kernel-include-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 alpha linux-source-alpha-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 arm linux-source-arm-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 common linux-source-common-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 i386 linux-source-i386-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 m68k linux-source-m68k-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 mips linux-source-mips-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 sparc linux-source-sparc-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 sparc64 linux-source-sparc64-2.2.10-14.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Caldera Upgrade 2.3 pcmcia-cs-3.0.14-5.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/2.3/current/RPMS

Linux kernel 2.2.11:
Linux kernel 2.2.12:
Linux kernel 2.2.13:

S.u.S.E. Upgrade 6.3 default k_deflt_22-2.2.19-162.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/6.3/kernel/2.2.19-20011026/k_deflt_22-2.2.19-162.i386.rpm

S.u.S.E. Upgrade 6.3 i386 k_i386_22-2.2.19-180.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/6.3/kernel/2.2.19-20011026/k_i386_22-2.2.19-180.i386.rpm

S.u.S.E. Upgrade 6.3 smp k_smp_22-2.2.19-177.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/6.3/kernel/2.2.19-20011026/k_smp_22-2.2.19-177.i386.rpm

S.u.S.E. Upgrade 6.4 default k_deflt_22-2.2.19-162.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/6.4/kernel/2.2.19-20011026/k_deflt_22-2.2.19-162.i386.rpm

S.u.S.E. Upgrade 6.4 i386 k_i386_22-2.2.19-180.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/6.4/kernel/2.2.19-20011026/k_i386_22-2.2.19-180.i386.rpm

S.u.S.E. Upgrade 6.4 smp k_smp_22-2.2.19-177.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/6.4/kernel/2.2.19-20011026/k_smp_22-2.2.19-177.i386.rpm

Linux kernel 2.2.14:

Red Hat Inc. Upgrade 6.2 alpha kernel-enterprise-2.2.19-6.2.12.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/kernel-enterprise-2.2.19-6.2.12.alpha.rpm

Red Hat Inc. Upgrade 6.2 alpha kernel-smp-2.2.19-6.2.12.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/kernel-smp-2.2.19-6.2.12.alpha.rpm

Caldera Upgrade 2.4 i386 linux-kernel-include-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 alpha linux-source-alpha-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 arm linux-source-arm-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 common linux-source-common-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 i386 linux-source-i386-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 m68k linux-source-m68k-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 mips linux-source-mips-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 ppc linux-source-ppc-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 sparc linux-source-sparc-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 sparc64 linux-source-sparc64-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 pcmcia-cs-3.1.8-5.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Red Hat Inc. Upgrade 6.2 alpha kernel-2.2.19-6.2.12.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/kernel-2.2.19-6.2.12.alpha.rpm

Red Hat Inc. Upgrade 6.2 alpha kernel-BOOT-2.2.19-6.2.12.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/kernel-BOOT-2.2.19-6.2.12.alpha.rpm

Red Hat Inc. Upgrade 6.2 alpha kernel-utils-2.2.19-6.2.12.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/kernel-utils-2.2.19-6.2.12.alpha.rpm

Red Hat Inc. Upgrade 6.2 alpha kernel-doc-2.2.19-6.2.12.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/kernel-doc-2.2.19-6.2.12.alpha.rpm

Red Hat Inc. Upgrade 6.2 alpha kernel-headers-2.2.19-6.2.12.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/kernel-headers-2.2.19-6.2.12.alpha.rpm

Red Hat Inc. Upgrade 6.2 alpha kernel-source-2.2.19-6.2.12.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/kernel-source-2.2.19-6.2.12.alpha.rpm

Red Hat Inc. Upgrade 6.2 alpha kernel-jensen-2.2.19-6.2.12.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/kernel-jensen-2.2.19-6.2.12.alpha.rpm

Red Hat Inc. Upgrade 6.2 i386 kernel-smp-2.2.19-6.2.12.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/kernel-smp-2.2.19-6.2.12.i386.rpm

Red Hat Inc. Upgrade 6.2 i386 kernel-2.2.19-6.2.12.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/kernel-2.2.19-6.2.12.i386.rpm

Red Hat Inc. Upgrade 6.2 i386 kernel-BOOT-2.2.19-6.2.12.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/kernel-BOOT-2.2.19-6.2.12.i386.rpm

Red Hat Inc. Upgrade 6.2 i386 kernel-ibcs-2.2.19-6.2.12.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/kernel-ibcs-2.2.19-6.2.12.i386.rpm

Red Hat Inc. Upgrade 6.2 i386 kernel-utils-2.2.19-6.2.12.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/kernel-utils-2.2.19-6.2.12.i386.rpm

Red Hat Inc. Upgrade 6.2 i386 kernel-pcmcia-cs-2.2.19-6.2.12.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/kernel-pcmcia-cs-2.2.19-6.2.12.i386.rpm

Red Hat Inc. Upgrade 6.2 i386 kernel-doc-2.2.19-6.2.12.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/kernel-doc-2.2.19-6.2.12.i386.rpm

Red Hat Inc. Upgrade 6.2 i386 kernel-headers-2.2.19-6.2.12.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/kernel-headers-2.2.19-6.2.12.i386.rpm

Red Hat Inc. Upgrade 6.2 i386 kernel-source-2.2.19-6.2.12.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/kernel-source-2.2.19-6.2.12.i386.rpm

Red Hat Inc. Upgrade 6.2 i586 kernel-smp-2.2.19-6.2.12.i586.rpm
ftp://updates.redhat.com/6.2/en/os/i586/kernel-smp-2.2.19-6.2.12.i586.rpm

Red Hat Inc. Upgrade 6.2 i586 kernel-2.2.19-6.2.12.i586.rpm
ftp://updates.redhat.com/6.2/en/os/i586/kernel-2.2.19-6.2.12.i586.rpm

Red Hat Inc. Upgrade 6.2 i686 kernel-enterprise-2.2.19-6.2.12.i686.rpm
ftp://updates.redhat.com/6.2/en/os/i686/kernel-enterprise-2.2.19-6.2.12.i686.rpm

Red Hat Inc. Upgrade 6.2 i686 kernel-smp-2.2.19-6.2.12.i686.rpm
ftp://updates.redhat.com/6.2/en/os/i686/kernel-smp-2.2.19-6.2.12.i686.rpm

Red Hat Inc. Upgrade 6.2 i686 kernel-2.2.19-6.2.12.i686.rpm
ftp://updates.redhat.com/6.2/en/os/i686/kernel-2.2.19-6.2.12.i686.rpm

Red Hat Inc. Upgrade 6.2 sparc kernel-enterprise-2.2.19-6.2.12.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/kernel-enterprise-2.2.19-6.2.12.sparc.rpm

Red Hat Inc. Upgrade 6.2 sparc kernel-smp-2.2.19-6.2.12.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/kernel-smp-2.2.19-6.2.12.sparc.rpm

Red Hat Inc. Upgrade 6.2 sparc kernel-2.2.19-6.2.12.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/kernel-2.2.19-6.2.12.sparc.rpm

Red Hat Inc. Upgrade 6.2 sparc kernel-BOOT-2.2.19-6.2.12.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/kernel-BOOT-2.2.19-6.2.12.sparc.rpm

Red Hat Inc. Upgrade 6.2 sparc kernel-doc-2.2.19-6.2.12.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/kernel-doc-2.2.19-6.2.12.sparc.rpm

Red Hat Inc. Upgrade 6.2 sparc kernel-headers-2.2.19-6.2.12.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/kernel-headers-2.2.19-6.2.12.sparc.rpm

Red Hat Inc. Upgrade 6.2 sparc kernel-source-2.2.19-6.2.12.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/kernel-source-2.2.19-6.2.12.sparc.rpm

Red Hat Inc. Upgrade 6.2 sparc kernel-utils-2.2.19-6.2.12.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/kernel-utils-2.2.19-6.2.12.sparc.rpm

Caldera Upgrade 2.3.1 i386 linux-kernel-binary-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 i386 linux-kernel-doc-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 i386 linux-kernel-include-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 alpha linux-source-alpha-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 arm linux-source-arm-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 common linux-source-common-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 i386 linux-source-i386-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 m68k linux-source-m68k-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 mips linux-source-mips-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 ppc linux-source-ppc-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 sparc linux-source-sparc-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 sparc64 linux-source-sparc64-2.2.14-13S.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.3.1 pcmcia-cs-3.1.4-5.i386.rpm
ftp://ftp.caldera.com/pub/updates/eServer/2.3/current/RPMS

Caldera Upgrade 2.4 hwprobe-20000214-6.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 iBCS-2.1-12.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 iBCS-extras-2.1-12.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 iBCS-module-2.1_2.2.14-12.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 i386 linux-kernel-binary-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Caldera Upgrade 2.4 i386 linux-kernel-doc-2.2.14-9.i386.rpm
ftp://ftp.caldera.com/pub/updates/eDesktop/2.4/current/RPMS

Linux kernel 2.2.15:
Linux kernel 2.2.16:

Red Hat Inc. Upgrade 7.0 alpha kernel-enterprise-2.2.19-7.0.12.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/kernel-enterprise-2.2.19-7.0.12.alpha.rpm

Red Hat Inc. Upgrade 7.0 alpha kernel-smp-2.2.19-7.0.12.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/kernel-smp-2.2.19-7.0.12.alpha.rpm

Red Hat Inc. Upgrade 7.0 alpha kernel-2.2.19-7.0.12.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/kernel-2.2.19-7.0.12.alpha.rpm

Red Hat Inc. Upgrade 7.0 alpha kernel-BOOT-2.2.19-7.0.12.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/kernel-BOOT-2.2.19-7.0.12.alpha.rpm

Red Hat Inc. Upgrade 7.0 alpha kernel-utils-2.2.19-7.0.12.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/kernel-utils-2.2.19-7.0.12.alpha.rpm

Red Hat Inc. Upgrade 7.0 alpha kernel-doc-2.2.19-7.0.12.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/kernel-doc-2.2.19-7.0.12.alpha.rpm

Red Hat Inc. Upgrade 7.0 alpha kernel-source-2.2.19-7.0.12.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/kernel-source-2.2.19-7.0.12.alpha.rpm

Red Hat Inc. Upgrade 7.0 alpha kernel-jensen-2.2.19-7.0.12.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/kernel-jensen-2.2.19-7.0.12.alpha.rpm

Red Hat Inc. Upgrade 7.0 i386 kernel-smp-2.2.19-7.0.12.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/kernel-smp-2.2.19-7.0.12.i386.rpm

Red Hat Inc. Upgrade 7.0 i386 kernel-2.2.19-7.0.12.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/kernel-2.2.19-7.0.12.i386.rpm

Red Hat Inc. Upgrade 7.0 i386 kernel-BOOT-2.2.19-7.0.12.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/kernel-BOOT-2.2.19-7.0.12.i386.rpm

Red Hat Inc. Upgrade 7.0 i386 kernel-ibcs-2.2.19-7.0.12.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/kernel-ibcs-2.2.19-7.0.12.i386.rpm

Red Hat Inc. Upgrade 7.0 i386 kernel-utils-2.2.19-7.0.12.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/kernel-utils-2.2.19-7.0.12.i386.rpm

Red Hat Inc. Upgrade 7.0 i386 kernel-pcmcia-cs-2.2.19-7.0.12.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/kernel-pcmcia-cs-2.2.19-7.0.12.i386.rpm

Red Hat Inc. Upgrade 7.0 i386 kernel-doc-2.2.19-7.0.12.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/kernel-doc-2.2.19-7.0.12.i386.rpm

Red Hat Inc. Upgrade 7.0 i386 kernel-source-2.2.19-7.0.12.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/kernel-source-2.2.19-7.0.12.i386.rpm

Red Hat Inc. Upgrade 7.0 i586 kernel-smp-2.2.19-7.0.12.i586.rpm
ftp://updates.redhat.com/7.0/en/os/i586/kernel-smp-2.2.19-7.0.12.i586.rpm

Red Hat Inc. Upgrade 7.0 i586 kernel-2.2.19-7.0.12.i586.rpm
ftp://updates.redhat.com/7.0/en/os/i586/kernel-2.2.19-7.0.12.i586.rpm

Red Hat Inc. Upgrade 7.0 i686 kernel-enterprise-2.2.19-7.0.12.i686.rpm
ftp://updates.redhat.com/7.0/en/os/i686/kernel-enterprise-2.2.19-7.0.12.i686.rpm

Red Hat Inc. Upgrade 7.0 i686 kernel-smp-2.2.19-7.0.12.i686.rpm
ftp://updates.redhat.com/7.0/en/os/i686/kernel-smp-2.2.19-7.0.12.i686.rpm

Red Hat Inc. Upgrade 7.0 i686 kernel-2.2.19-7.0.12.i686.rpm
ftp://updates.redhat.com/7.0/en/os/i686/kernel-2.2.19-7.0.12.i686.rpm

Linux kernel 2.2.17:

S.u.S.E. Upgrade 7.0 default k_deflt_22-2.2.19-162.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.0/kernel/2.2.19-20011026/k_deflt_22-2.2.19-162.i386.rpm

S.u.S.E. Upgrade 7.0 i386 k_i386_22-2.2.19-180.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.0/kernel/2.2.19-20011026/k_i386_22-2.2.19-180.i386.rpm

S.u.S.E. Upgrade 7.0 smp k_smp_22-2.2.19-177.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.0/kernel/2.2.19-20011026/k_smp_22-2.2.19-177.i386.rpm

Linux kernel 2.2.18:
Linux kernel 2.2.19:

EnGarde Secure Linux Upgrade 1.0.1 i386 kernel-2.2.19-1.0.21.i386.rpm
ftp://ftp.engardelinux.org/pub/engarde/stable/updates/

EnGarde Secure Linux Upgrade 1.0.1 i386 kernel-lids-mods-2.2.19-1.0.21.i386.rpm
ftp://ftp.engardelinux.org/pub/engarde/stable/updates/

EnGarde Secure Linux Upgrade 1.0.1 i386 kernel-smp-lids-mods-2.2.19-1.0.21.i386.rpm
ftp://ftp.engardelinux.org/pub/engarde/stable/updates/

EnGarde Secure Linux Upgrade 1.0.1 i386 kernel-smp-mods-2.2.19-1.0.21.i386.rpm
ftp://ftp.engardelinux.org/pub/engarde/stable/updates/

EnGarde Secure Linux Upgrade 1.0.1 i686 kernel-2.2.19-1.0.21.i686.rpm
ftp://ftp.engardelinux.org/pub/engarde/stable/updates/

EnGarde Secure Linux Upgrade 1.0.1 i686 kernel-lids-mods-2.2.19-1.0.21.i686.rpm
ftp://ftp.engardelinux.org/pub/engarde/stable/updates/

EnGarde Secure Linux Upgrade 1.0.1 i686 kernel-smp-lids-mods-2.2.19-1.0.21.i686.rpm
ftp://ftp.engardelinux.org/pub/engarde/stable/updates/

EnGarde Secure Linux Upgrade 1.0.1 i686 kernel-smp-mods-2.2.19-1.0.21.i686.rpm
ftp://ftp.engardelinux.org/pub/engarde/stable/updates/

Linux kernel 2.2.20:
Linux kernel 2.4:
Linux kernel 2.4.1:
Linux kernel 2.4.2:

Red Hat Inc. Upgrade 7.1 alpha kernel-2.4.9-12.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-2.4.9-12.alpha.rpm

Red Hat Inc. Upgrade 7.1 alpha kernel-source-2.4.9-12.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-source-2.4.9-12.alpha.rpm

Caldera Upgrade 3.1 server i386 linux-source-i386-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server ia64 linux-source-ia64-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server m68k linux-source-m68k-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server mips linux-source-mips-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server ppc linux-source-ppc-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server s390 linux-source-s390-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server sparc linux-source-sparc-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server superH linux-source-superH-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 workstation i386 linux-kernel-binary-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation i386 linux-kernel-include-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation alpha linux-source-alpha-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation arm linux-source-arm-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation common linux-source-common-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation i386 linux-source-i386-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation ia64 linux-source-ia64-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation m68k linux-source-m68k-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation mips linux-source-mips-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation ppc linux-source-ppc-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation s390 linux-source-s390-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation sparc linux-source-sparc-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Caldera Upgrade 3.1 workstation superH linux-source-superH-2.4.2-14D.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RPMS

Red Hat Inc. Upgrade 7.1 alpha kernel-headers-2.4.9-12.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-headers-2.4.9-12.alpha.rpm

Red Hat Inc. Upgrade 7.1 alpha kernel-doc-2.4.9-12.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-doc-2.4.9-12.alpha.rpm

Red Hat Inc. Upgrade 7.1 alpha kernel-smp-2.4.9-12.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-smp-2.4.9-12.alpha.rpm

Red Hat Inc. Upgrade 7.1 alpha kernel-BOOT-2.4.9-12.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-BOOT-2.4.9-12.alpha.rpm

Red Hat Inc. Upgrade 7.1 i386 kernel-2.4.9-12.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-2.4.9-12.i386.rpm

Red Hat Inc. Upgrade 7.1 i386 kernel-source-2.4.9-12.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.9-12.i386.rpm

Red Hat Inc. Upgrade 7.1 i386 kernel-headers-2.4.9-12.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-headers-2.4.9-12.i386.rpm

Red Hat Inc. Upgrade 7.1 i386 kernel-doc-2.4.9-12.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-doc-2.4.9-12.i386.rpm

Red Hat Inc. Upgrade 7.1 i386 kernel-BOOT-2.4.9-12.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-BOOT-2.4.9-12.i386.rpm

Red Hat Inc. Upgrade 7.1 i586 kernel-2.4.9-12.i586.rpm
ftp://updates.redhat.com/7.1/en/os/i586/kernel-2.4.9-12.i586.rpm

Red Hat Inc. Upgrade 7.1 i586 kernel-smp-2.4.9-12.i586.rpm
ftp://updates.redhat.com/7.1/en/os/i586/kernel-smp-2.4.9-12.i586.rpm

Red Hat Inc. Upgrade 7.1 i686 kernel-2.4.9-12.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-2.4.9-12.i686.rpm

Red Hat Inc. Upgrade 7.1 i686 kernel-smp-2.4.9-12.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-smp-2.4.9-12.i686.rpm

Red Hat Inc. Upgrade 7.1 i686 kernel-enterprise-2.4.9-12.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-enterprise-2.4.9-12.i686.rpm

Red Hat Inc. Upgrade 7.1 ia64 kernel-2.4.9-12.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-2.4.9-12.ia64.rpm

Red Hat Inc. Upgrade 7.1 ia64 kernel-source-2.4.9-12.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-source-2.4.9-12.ia64.rpm

Red Hat Inc. Upgrade 7.1 ia64 kernel-headers-2.4.9-12.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-headers-2.4.9-12.ia64.rpm

Red Hat Inc. Upgrade 7.1 ia64 kernel-doc-2.4.9-12.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-doc-2.4.9-12.ia64.rpm

Red Hat Inc. Upgrade 7.1 ia64 kernel-smp-2.4.9-12.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-smp-2.4.9-12.ia64.rpm

Caldera Upgrade 3.1 server i386 linux-kernel-binary-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server i386 linux-kernel-include-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server alpha linux-source-alpha-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server arm linux-source-arm-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Caldera Upgrade 3.1 server common linux-source-common-2.4.2-14S.i386.rpm
ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS

Linux kernel 2.4.3:
Linux kernel 2.4.4:
Linux kernel 2.4.5:
Linux kernel 2.4.6:
Linux kernel 2.4.7:

Red Hat Inc. Upgrade 7.2 i386 kernel-2.4.9-13.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-2.4.9-13.i386.rpm

Red Hat Inc. Upgrade 7.2 i386 kernel-source-2.4.9-13.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.9-13.i386.rpm

Red Hat Inc. Upgrade 7.2 i386 kernel-headers-2.4.9-13.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-headers-2.4.9-13.i386.rpm

Red Hat Inc. Upgrade 7.2 i386 kernel-doc-2.4.9-13.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-doc-2.4.9-13.i386.rpm

Red Hat Inc. Upgrade 7.2 i386 kernel-BOOT-2.4.9-13.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.9-13.i386.rpm

Red Hat Inc. Upgrade 7.2 i586 kernel-2.4.9-13.i586.rpm
ftp://updates.redhat.com/7.2/en/os/i586/kernel-2.4.9-13.i586.rpm

Red Hat Inc. Upgrade 7.2 i586 kernel-smp-2.4.9-13.i586.rpm
ftp://updates.redhat.com/7.2/en/os/i586/kernel-smp-2.4.9-13.i586.rpm

Red Hat Inc. Upgrade 7.2 i686 kernel-2.4.9-13.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.9-13.i686.rpm

Red Hat Inc. Upgrade 7.2 i686 kernel-debug-2.4.9-13.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-debug-2.4.9-13.i686.rpm

Red Hat Inc. Upgrade 7.2 i686 kernel-smp-2.4.9-13.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-smp-2.4.9-13.i686.rpm

Red Hat Inc. Upgrade 7.2 i686 kernel-enterprise-2.4.9-13.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-enterprise-2.4.9-13.i686.rpm

S.u.S.E. Upgrade 7.1 default k_deflt-2.4.7-25.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.1/kernel/2.4.7-20011026/k_deflt-2.4.7-25.i386.rpm

S.u.S.E. Upgrade 7.1 i386 k_i386-2.4.7-21.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.1/kernel/2.4.7-20011026/k_i386-2.4.7-21.i386.rpm

S.u.S.E. Upgrade 7.1 psmp k_psmp-2.4.7-21.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.1/kernel/2.4.7-20011026/k_psmp-2.4.7-21.i386.rpm

S.u.S.E. Upgrade 7.1 smp k_smp-2.4.7-22.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.1/kernel/2.4.7-20011026/k_smp-2.4.7-22.i386.rpm

S.u.S.E. Upgrade 7.2 default k_deflt-2.4.7-25.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/kernel/2.4.7-20011026/k_deflt-2.4.7-25.i386.rpm

S.u.S.E. Upgrade 7.2 i386 k_i386-2.4.7-21.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/kernel/2.4.7-20011026/k_i386-2.4.7-21.i386.rpm

S.u.S.E. Upgrade 7.2 psmp k_psmp-2.4.7-21.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/kernel/2.4.7-20011026/k_psmp-2.4.7-21.i386.rpm

S.u.S.E. Upgrade 7.2 smp k_smp-2.4.7-22.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/kernel/2.4.7-20011026/k_smp-2.4.7-22.i386.rpm

Linux kernel 2.4.8:
Linux kernel 2.4.9:
Linux kernel 2.4.10:

S.u.S.E. Upgrade 7.3 default k_deflt-2.4.10-25.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/kernel/2.4.10-20011026/k_deflt-2.4.10-25.i386.rpm

S.u.S.E. Upgrade 7.3 i386 k_i386-2.4.10-24.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/kernel/2.4.10-20011026/k_i386-2.4.10-24.i386.rpm

S.u.S.E. Upgrade 7.3 psmp k_psmp-2.4.10-26.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/kernel/2.4.10-20011026/k_psmp-2.4.10-26.i386.rpm

S.u.S.E. Upgrade 7.3 smp k_smp-2.4.10-24.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/kernel/2.4.10-20011026/k_smp-2.4.10-24.i386.rpm

相关信息
参考:
http://www.securityfocus.com/advisories/3642
http://www.securityfocus.com/advisories/3644
http://www.securityfocus.com/advisories/3639
http://www.securityfocus.com/advisories/3640