Description: A security issue and a weakness have been reported in the Linux Kernel, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or bypass certain security restrictions.
1) A boundary error due to the use of RTA_MAX instead of RTN_MAX in dn_fib_props[] within dn_fib.c and in fib_props[] within fib_semantics.c can potentially be exploited to cause a DoS.
2) The "xfer_secondary_pool()" function in drivers/char/random.c uses the wrong data to refeed seeds into the random number generator. This may weaken the security of applications relying on the random number generator.
Note: This also fixes a problem introduced by a previous smbfs security patch.
Solution: Update to version 2.4.35.
Provided and/or discovered by: 1) PaX Team
2) Thomas Graf
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
