Secunia

Linux Kernel 2.2 has been found vulnerable to a Denial of Service condition. It is possible for local users to read the memory used by certain programs by using "/proc/pid/mem" and "mmap()".

However, requests are not validated properly. This can be exploited by users to request access to memory pages that are non-readable to the program that is analysed. If the user requests the kernel to read those memory pages, the system will crash.

This does not affect 2.4 kernels as they do not support "mmap()" on "/proc/pid/mem".

Solution
This issue will be fixed in kernel 2.2.24; until then only third party solutions are available. Secunia recommends that you keep track of users and user activity and disable users' accounts if they try to abuse this vulnerability.
Further details available in Customer Area

Provided and/or discovered by
RAZOR bindview

Deep Links
Links available in Customer Area