Secunia

A vulnerability and a weakness have been reported in Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

1) An error exists when the kernel returns program control using SYSRET on Intel EM64T CPUs. The may cause a DoS due to the way Intel EM64T CPUs handle uncanonical return addresses when a user has been able to change the frames.

2) Improperly use of BUG_ON in the "__group_complete_signal()" function may in certain cases be exploited to cause unwanted process crashes.

Solution
Update to version 2.6.16.5.

Provided and/or discovered by
1) Reported by the vendor.
2) Oleg Nesterov

Changelog
Further details available in Customer Area

Original Advisory
http://marc.theaimsgroup.com/?l=linux-kernel&m=114476543426600&w=2

Kernel.org:
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.4
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.5
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=commit;h=0945e1a305ef6128c0405f1c5c8b5368d8756224

Deep Links
Links available in Customer Area