Some security issues have been reported in the Linux Kernel, which can be exploited by malicious, local users to bypass certain security restrictions, to gain escalated privileges, or to cause a DoS (Denial of Service).

1) The USBLCD driver does not limit the memory consumption during writes to the device. This can be exploited to cause an out-of-memory condition by writing a large amount of data to an affected device.

Successful exploitation requires write access to a device using the driver.

2) An error in the implementation of the "sys_setrlimit()" system call can be exploited to bypass CPU time limits by setting RLIMIT_CPU to 0.

3) An error in the "ftruncate()" functionality can be exploited to potentially gain escalated group privileges by creating a file in a setgid directory.

Solution
Update to version 2.6.22.

Provided and/or discovered by
1) Reported by the vendor.
2) Reported by David Peer in a Zsh bug report.
3) Reported by David Watson in a kernel bug report.

Changelog
Further details available to Secunia VIM customers

Original Advisory
1) http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.22-rc7
2) http://www.zsh.org/mla/workers/2007/msg00200.html
3) http://bugzilla.kernel.org/show_bug.cgi?id=8420

Deep Links
Links available to Secunia VIM customers