Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

1) A NULL pointer dereference error when reading a DNS resolver key instantiated with an error indication can be exploited to crash the kernel.

2) The "__nfs4_proc_set_acl()" function in fs/nfs/nfs4proc.c incorrectly uses slab memory, which can be exploited to trigger a sanity check when trying to free the memory in subsequent functions via e.g. a setacl operation exceeding a page of data.

3) An error within the "br_multicast_add_group()" function in net/bridge/br_multicast.c can be exploited to corrupt a list, which can lead to e.g. a memory corruption by sending certain IGMP packets.

Successful exploitation of this vulnerability requires that the kernel is compiled with the "BRIDGE_IGMP_SNOOPING" option.

Solution
Update to version 2.6.38.

Provided and/or discovered by
Disclosed in a GIT commit.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=1362fa078dae16776cd439791c6605b224ea6171
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=e9e3d724e2145f5039b423c290ce2b2c3d8f94bc
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=6b0d6a9b4296fa16a28d10d416db7a770fc03287

Deep Links
Links available to Secunia VIM customers