A vulnerability has been reported in the Linux kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to the Vicam USB driver dereferencing userspace pointers directly instead of using the "copy_from_user()" function when accessing userspace. This violates security boundaries and can result in a DoS when copying data from user to kernel space.

The vulnerability reportedly affects kernel versions prior to 2.4.25 and 2.6.6.

Solution
The vulnerability has been addressed in versions 2.4.25 and 2.6.6.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported in Red Hat and SuSE advisories.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Red Hat:
http://rhn.redhat.com/errata/RHSA-2004-065.html

SuSE:
http://www.suse.com/de/security/2004_05_linux_kernel.html

Deep Links
Links available to Secunia VIM customers