Secunia

Eugene Teo has reported a vulnerability in the Linux Kernel, which can be exploited by malicious, local users in a VMI guest to cause a DoS (Denial of Service) and potentially gain escalated privileges.

The vulnerability is caused due to an error within the "vmi_write_ldt_entry()" function in arch/x86/kernel/vmi_32.c. This can be exploited to write values into the IDT by e.g. calling "sys_modify_ldt()".

Successful exploitation requires that the kernel is running as VMI guest on a x86 system.

Solution
Fixed in the GIT repository.
Further details available in Customer Area

Provided and/or discovered by
Eugene Teo, Red Hat

Changelog
Further details available in Customer Area

Original Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=de59985e3a623d4d5d6207f1777398ca0606ab1c

Deep Links
Links available in Customer Area