Secunia

Tetsuo Handa has reported a vulnerability in the Linux Kernel, which potentially can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to an infinite loop error in the "udp_v6_get_port()" function in "net/ipv6/udp.c". This may be exploited to cause a DoS.

The vulnerability affects version 2.2.26 and prior, version 2.4.32-rc1 and prior, and version 2.6.13.4 and prior.

Solution
The vulnerability has been fixed in version 2.4.32-rc2 and in version 2.6.14-rc5.
Further details available in Customer Area

Provided and/or discovered by
Tetsuo Handa

Changelog
Further details available in Customer Area

Original Advisory
Kernel.org:
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=87bf9c97b4b3af8dec7b2b79cdfe7bfc0a0a03b2
http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git;a=commit;h=2d5a5e7918796127b64e996f6a9f00d5e95161ed

Red Hat Bugzilla:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170772

Deep Links
Links available in Customer Area