Linux Kernel contains a flaw in the m_stop implementation that may allow a local denial of service. The issue is due to an error in the m_stop function in fs/proc/task_mmu.c. With a specially crafted request triggering an m_start error, a local attacker can cause a kernel panic.
Classification
Location:
Local Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Solution:
Upgrade,
Third-Party Solution
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified,
Third-party Verified,
Coordinated Disclosure
OSVDB:
Authentication Required
Solution
It has been reported that this issue has been fixed. Upgrade to version 2.6.39, or higher, to address this vulnerability.
