Linux Kernel cifs dns query Cache Poisoning Vulnerability and repair

Affected Versions:

Linux kernel 2.6.x

Vulnerability description:

Bugtraq id: 41904CVE ID: CVE-2010-2524Linux Kernel is the Kernel used by open source operating system Linux. Linux Kernel's cifs dns parser does not properly restrict access to the key ring storage query results,

If a random user adds a result record to the key ring through add_key () and then calls cifs cfs,

You can install malicious redirection to trick users into loading systems from malicious servers.

<* Reference

Http://secunia.com/advisories/40691/

*>Security suggestions:

Vendor patch: Linux ----- the current manufacturer has released the upgrade patch to fix this security problem, please go to the vendor's home page download: http://git.kernel.org /? P = linux/kernel/git/torvalds/linux-2.6.git; a =

Commitdiff; h = 4c0c03ca54f72fdd5912516ad0a23ec5cf01bda7