Two vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to disclose potentially sensitive information, and to cause a DoS (Denial of Service).

1) The "dm-crypt" driver fails to clear memory before freeing it. This can be exploited by local users to obtain sensitive information (e.g. cryptographic keys).

The vulnerability has been reported in version 2.6.15.1. Other versions may also be affected.

2) An error in the "mq_open" system call can cause the "mqueue_mnt->mnt_count" counter to be decremented twice when the "dentry_open" function call fails. This can potentially be exploited by malicious users to cause a kernel panic.

Solution
Update to version 2.6.15.2.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Stefan Rompf
2) Doug Chapman

Changelog
Further details available to Secunia VIM customers

Original Advisory
Kernel.org:
http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.15-git12.log
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.16-rc1
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9d3520a339d62f942085e9888f66905eb8b350bd
http://marc.theaimsgroup.com/?l=linux-kernel&m=113640535312572
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.2
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7c7dce9209161eb260cdf9e9172f72c3a02379e6

Red Hat Bugzilla:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169130

Deep Links
Links available to Secunia VIM customers