A weakness, security issues, and vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to bypass certain security restrictions, disclose potentially sensitive information, and cause a DoS (Denial of Service), and by malicious users to bypass certain security restrictions.

1) A security issue is caused due to CAP_FS_MASK not including the CAP_MKNOD and CAP_LINUX_IMMUTABLE capabilities, which can be exploited to e.g. create device nodes.

2) A weakness when processing the signals sent by a child process can be exploited to e.g. kill a parent process with higher privileges.

For more information:
SA34033

3) A security issue is caused due to the "exit_notify()" function in kernel/exit.c incorrectly checking for the "CAP_KILL" capability.

4) Some security issues are caused due to integer overflows, which can be exploited to disclose potentially sensitive information via an overly large length value.

For more information about security issues #3 and #4:
SA34614

5) A vulnerability is caused due to "sendmsg()" not correctly blocking while the UNIX garbage collector is running.

For more information:
SA32913

Solution
Update to version 2.4.37.1.

Provided and/or discovered by
1) Igor Zhbanov

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.1

1) http://thread.gmane.org/gmane.linux.kernel/805280

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers