A vulnerability has been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to a NULL-pointer dereference error within the "cifs_create()" function in fs/cifs/dir.c. This can be exploited to cause a crash when a file without an associated "nameidata" structure is created.

The vulnerability is reported in version 2.6.29-rc6 and later.

Solution
Restrict local access to trusted users only.

Provided and/or discovered by
Eugene Teo, Red Hat

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.openwall.com/lists/oss-security/2010/04/05/1
https://bugzilla.redhat.com/show_bug.cgi?id=579445

Deep Links
Links available to Secunia VIM customers