Some security issues have been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

1) A security issue is caused due to the KVM implementation allowing a guest machine direct access to host port 80h and can be exploited to hang the host system.

NOTE: The security issue only affects certain AMD platforms.

2) A security issue is caused due to a locking error within the implementation of the "splice()" system call, which can be exploited to e.g. deadlock other applications.

The security issues are reported in versions prior to 2.6.29.4.

Solution
Update to version 2.6.29.4.

Provided and/or discovered by
1) Piotr Jaroszynski
2) Miklos Szeredi

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.4

http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc6
http://git.kernel.org/linus/99f85a28a78e96d28907fe036e1671a218fee597

Deep Links
Links available to Secunia VIM customers