RH Kernel Vulnurability

Eldric plug-discuss@lists.plug.phoenix.az.us
Mon, 18 Nov 2002 05:25:55 -0700


Security Advisory - RHSA-2002:262-07
------------------------------------------------------------------------------
Summary:
New kernel fixes local denial of service issue
The kernel in Red Hat Linux 7.1, 7.1K, 7.2, 7.3, and 8.0 are vulnerable to
a local denial of service attack. Updated packages are available which
address this vulnerability, as well as bugs in several drivers.
Description:
The Linux kernel handles the basic functions of the operating system.
A vulnerability in the Linux kernel has been discovered in which a non-root
user can cause the machine to freeze. This kernel addresses the
vulnerability.
Note: This bug is specific to the x86 architecture kernels only, and does
not affect ia64 or other architectures.
In addition, a bug in the maestro3 soundcard driver has been fixed as well
as a bug in the xircom pcmcia driver network driver and the tg3 network
driver for Broadcom gigabit ethernet chips.
All users of Red Hat Linux 7.1, 7.1K, 7.2, 7.3, and 8.0 should upgrade to
these errata packages, which are not vulnerable to this issue.