Secunia

Two vulnerabilities have been reported in Linux Kernel, which can be exploited by malicious, local users to bypass certain security restrictions and by malicious people to cause a DoS (Denial of Service).

1) Missing checks on SCTP chunk sizes in the SCTP-netfilter code and may result in an infinite loop exhausting system resources.

2) Two missing Linux Security Modules (LSM) file permission hooks in the "do_compat_readv_writev()" function can be exploited by local users to bypass the LSM by using readv() or writev() using 32-bit compatible apps when running on a 64-bit kernel.

Solution
Update to version 2.6.16.13 or later.
Further details available in Customer Area

Provided and/or discovered by
1) Reported by the vendor.
2) Al Viro

Changelog
Further details available in Customer Area

Original Advisory
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.12
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.13
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=commit;h=9120b4470e2e57f196a0e470898ae628725fb4c2

Deep Links
Links available in Customer Area