Stas Sergeev has reported a vulnerability in the Linux kernel, which potentially can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to the "exit_thread()" function not invalidating per-TSS IO bitmap pointers before certain processes exit. This may result in other processes inheriting the IO access permissions.

Version 2.6.5 is reportedly affected. Other versions may also be vulnerable.

Solution
Update to version 2.6.6 or later.

Provided and/or discovered by
Stas Sergeev

Changelog
Further details available in Customer Area

Original Advisory
http://www.ussg.iu.edu/hypermail/linux/kernel/0405.0/1242.html

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.6

Deep Links
Links available in Customer Area