A vulnerability has been reported in the Linux Kernel, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an integer overflow within the "xfs_acl_from_disk()" function (fs/xfs/xfs_acl.c) and can be exploited to corrupt kernel memory.

Successful exploitation requires physical access to systems that automatically mount inserted media devices or that a user is tricked into mounting a malicious filesystem (e.g. USB drives).

Solution
Fixed in versions 2.6.32.54 and 2.6.34.14.

Provided and/or discovered by
Initially disclosed in a GIT commit. Additional information regarding an incorrect fix provided by Xi Wang.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.34/ChangeLog-2.6.34.14
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba

Xi Wang:
http://kqueue.org/blog/2012/01/10/cve-2012-0038-xfs-acl-count-integer-overflow/

Deep Links
Links available to Secunia VIM customers