Secunia

A security issue and a weakness have been reported in the Linux Kernel, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or bypass certain security restrictions.

1) A boundary error due to the use of RTA_MAX instead of RTN_MAX in dn_fib_props[] within dn_fib.c and in fib_props[] within fib_semantics.c can potentially be exploited to cause a DoS.

2) The "xfer_secondary_pool()" function in drivers/char/random.c uses the wrong data to refeed seeds into the random number generator. This may weaken the security of applications relying on the random number generator.

Note: This also fixes a problem introduced by a previous smbfs security patch.

Solution
Update to version 2.4.35.

Provided and/or discovered by
1) PaX Team
2) Thomas Graf

Original Advisory
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35

Deep Links
Links available in Customer Area