A vulnerability and a security issue have been reported in the Linux Kernel, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An error exists within the processing of packets with IPv6 type 0 route headers. This can be exploited to cause a DoS due to high network traffic by sending specially crafted IPv6 packets to vulnerable systems.

2) A boundary error due to the use of RTA_MAX instead of RTN_MAX in dn_fib_props[] within dn_fib.c and in fib_props[] within fib_semantics.c can potentially be exploited to cause a DoS.

Solution
Update to version 2.6.21.

Provided and/or discovered by
1) Philippe Biondi and Arnaud Ebalard
2) Thomas Graf

Changelog
Further details available to Secunia VIM customers

Original Advisory
Linux:
1) http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21
2) http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6

http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf

Deep Links
Links available to Secunia VIM customers