A security issue and some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to disclose potentially sensitive information.

1) Several vulnerabilities are caused due to various functions not properly clearing certain structure members before returning them to userspace, which can be exploited to disclose kernel memory.

Note: This is partially related to SA36617.

2) An error in the implementation of the "sigaltstack()" function and can be exploited to disclose a limited amount of kernel stack memory.

This is related to:
SA36136

Successful exploitation may require that the kernel is running on a 64-bit platform.

Solution
Update to version 2.4.37.6.

Provided and/or discovered by
1) Reported by the vendor.
2) The vendor credits Ulrich Drepper.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commitdiff;h=096ed17f20affc2db0e307658c69b67433992a7a
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commitdiff;h=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commitdiff;h=3408cce0c2f380884070896420ca566704452fb5
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commitdiff;h=0f3f2328f63c521fe4b435f148687452f98b2349
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commitdiff;h=1efc949ac0e96be60adbc137695f59ec0bc70ce6
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commitdiff;h=506a03e720d34bb880e9862b388addcaaf1a8681

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers