Secunia

Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users and malicious people to cause a DoS (Denial of Service).

1) A vulnerability is caused due to a boundary error in the "pppol2tp_recvmsg()" function and can potentially be exploited to corrupt kernel memory via a specially crafted PPP over L2TP packet.

2) A vulnerability is caused due to an incorrect lock in the "do_setlk()" function in fs/nfs/file.c, which can be exploited to e.g. crash a vulnerable system by executing a malicious application.

Solution
Update to version 2.6.26.

Provided and/or discovered by
1) The vendor credits Ilja of Netric.
2) Trond Myklebust

Changelog
Further details available in Customer Area

Original Advisory
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26

1) http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6b6707a50c7598a83820077393f8823ab791abf8
2) http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc

Deep Links
Links available in Customer Area