Secunia

Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and potentially gain escalated privileges, and by malicious people to cause a DoS (Denial of Service).

1) An error within the "kvm_vcpu_ioctl_x86_setup_mce()" function in arch/x86/kvm/x86.c can be exploited to corrupt kernel memory by e.g. sending a specially crafted "KVM_X86_SETUP_MCE" IOCTL.

2) An error within the "ieee80211_sta_stop_rx_ba_session()" function in net/mac80211/agg-rx.c can be exploited to trigger a kernel panic.

3) A race condition exists within the mac80211 subsystem when handling delBA frames, which can be exploited to crash the kernel.

This may only affect HT drivers.

Solution
Update to version 2.6.32.

Provided and/or discovered by
1) Disclosed in a GIT commit.
2, 3) Lennert Buytenhek

Changelog
Further details available in Customer Area

Original Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=a9e38c3e01ad242fe2a625354cf065c34b01e3aa
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=4253119acf412fd686ef4bd8749b5a4d70ea3a51
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7

Deep Links
Links available in Customer Area