A vulnerability has been reported in the Linux Kernel, which can be exploited by malicious, local users to bypass certain security restrictions.

The vulnerability is caused due to the ReiserFS file system implementation not properly restricting access to the ".reiserfs_priv" directory, which can be exploited to e.g. gain root privileges by modifying ACLs or extended attributes.

Successful exploitation requires that the ReiserFS file system is used.

Solution
Update to version 2.6.33.4 or 2.6.32.13.

Provided and/or discovered by
Matt McCutchen

Changelog
Further details available to Secunia VIM customers

Original Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=568041

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.34-rc6
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33.4
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.13

Deep Links
Links available to Secunia VIM customers