Secunia

Three vulnerabilities have been identified in the Linux Kernel 2.4 branch. One can be exploited to cause a Denial of Service by a malicious person and is very similar to the recent Linux Kernel Denial of Service. The others are local Denial of Service vulnerabilities.

The remote Denial of Service is possible, because malicious people can cause hash table collisions by sending a stream of maliciously crafted fragmented TCP packets. This will cause the system to consume large amounts of CPU resources.

For more information about hash table collisions see:
http://secunia.com/advisories/8786/

It is possible to cause a kernel oops, because of an unspecified vulnerability in the tty layer. This could possibly reveal sensitive information to local users or cause a Denial of Service.

A malformed address may cause low level mxcsr code to leave garbage in CPU state registers. This could possibly lead to a Denial of Service.

Solution
We are not aware of any official patches for the Linux Kernel.
Further details available in Customer Area

Provided and/or discovered by
Al Viro
Andrea Arcangeli

Original Advisory
http://rhn.redhat.com/errata/RHSA-2003-187.html

Deep Links
Links available in Customer Area