Secunia

Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to bypass certain security restrictions, cause a DoS (Denial of Service), and gain escalated privileges.

1) A vulnerability is caused due to the kernel not properly limiting the growth of the stack in userspace applications, which can be exploited to e.g. overwrite other memory areas and gain escalated privileges via e.g. the X server.

2) A vulnerability is caused due to the JFS file system not properly enforcing xattr namespace access rules, which can be exploited to bypass the access rules by prefixing valid xattr names with "os2".

Solution
Update to version 2.6.32.19, 2.6.34.4, or 2.6.35.2.

Provided and/or discovered by
1) Rafal Wojtczuk, Invisible Things Lab
2) Sergey Vlasov

Changelog
Further details available in Customer Area

Original Advisory
1) Invisible Things Lab:
http://www.invisiblethingslab.com/resources/misc-2010/xorg-large-memory-attacks.pdf

Linux Kernel GIT commit:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=320b2b8de12698082609ebbc1a17165727f4c893

Red Hat Bug #606611:
https://bugzilla.redhat.com/show_bug.cgi?id=606611

2) http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=aca0fa34bdaba39bfddddba8ca70dba4782e8fe6

Deep Links
Links available in Customer Area