Secunia

A vulnerability has been reported in the Linux Kernel, which potentially can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to a error within the "lease_init()" function in "fs/locks.c". This causes it to free memory that may not have been allocated using the "locks_alloc_lock()" function. This may cause the kernel to crash when the "fcntl_setlease()" function is called.

Note: A slab leak in "__setlease()" due to an uninitialised return value has also been reported.

Solution
Update to version 2.6.16.16.
Further details available in Customer Area

Provided and/or discovered by
Daniel Hokka Zakrisson and B. Steinbrink.

Changelog
Further details available in Customer Area

Original Advisory
Kernel.org:
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.16
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=commit;h=1f0e637c94a9b041833947c79110d6c02fff8618

Deep Links
Links available in Customer Area