Secunia

Brad Spengler has reported a vulnerability in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to the kernel incorrectly setting the maximum stack size for 32bit applications in a 64bit environment, which can be exploited to e.g. trigger a "BUG()" or cause out-of-memory conditions via specially crafted applications.

Successful exploitation requires a 64bit system.

Solution
Update to version 2.6.36.

Provided and/or discovered by
Brad Spengler

Changelog
Further details available in Customer Area

Original Advisory
http://grsecurity.net/~spender/64bit_dos.c
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=9aea5a65aa7a1af9a4236dfaeb0088f1624f9919
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=7993bc1f4663c0db67bb8f0d98e6678145b387cd
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=1b528181b2ffa14721fb28ad1bd539fe1732c583

Deep Links
Links available in Customer Area