New kernel fixes local denial of service issue

The kernel in Red Hat Linux 7.1, 7.1K, 7.2, 7.3, and 8.0 are vulnerable to
a local denial of service attack. Updated packages are available which
address this vulnerability, as well as bugs in several drivers.

The Linux kernel handles the basic functions of the operating system.
A vulnerability in the Linux kernel has been discovered in which a non-root
user can cause the machine to freeze. This kernel addresses the
vulnerability.

Note: This bug is specific to the x86 architecture kernels only, and does
not affect ia64 or other architectures.

In addition, a bug in the maestro3 soundcard driver has been fixed as well
as a bug in the xircom pcmcia driver network driver and the tg3 network
driver for Broadcom gigabit ethernet chips.

All users of Red Hat Linux 7.1, 7.1K, 7.2, 7.3, and 8.0 should upgrade to
these errata packages, which are not vulnerable to this issue.

Thanks go to Christopher Devine for reporting the vulnerability on bugtraq,
and Petr Vandrovec for being the first to supply a fix to the community.

Before applying this update, make sure all previously released errata
relevant to your system have been applied, especially the additional
packages from RHSA-2002:205 and RHSA-2002:206 respectively.

The procedure for upgrading the kernel manually is documented at:

http://www.redhat.com/support/docs/howto/kernel-upgrade/

Please read the directions for your architecture carefully before
proceeding with the kernel upgrade.

Please note that this update is also available via Red Hat Network. Many
people find this to be an easier way to apply updates. To use Red Hat
Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system. Note that you need to select the kernel
explicitly on default configurations of up2date.

69920 - Kernel Crashes in TG3 Driver
75359 - kernel source does not compile due to missing include files
76171 - kernel-2.4.18-17.7.x update caused maestro3 to stop working
76206 - xirc2ps_cs hangs apmd after upgrading to 2.4.18-17
76233 - new kernel up2date hangs laptop at shutdown
76385 - 2.4.18-17.7.x update breaks Wacom tablet support
76555 - problems with kernel-2.4.18-17.8.0 on Dell Latitude CPx
76624 - Segmentation Fault using GDTH on RH72 kernel-smp-2.4.18-17.7.x
77134 - Sound Modules fail for Enigma kernel 2.4.18-17.7.x
77138 - Sound Modules Fail for Enigma kernel 2.4.18-17.7.x on Dell Latitude J750
77241 - esd peaks CPU w/ kernel 2.4.18-17.8.0 on Dell Inspiron 8100
77258 - Ethernet interface not working on SiS 963 south bridge (SiS 648 chipset)
77565 - [gdth] NULL pointer dereference in scsi.c (scsi_release_commandblocks)
77834 - Working Dos from bugtraq mailing list

https://www.redhat.com/security/data/cve/CVE-2002-1319.html
http://online.securityfocus.com/archive/1/299687/2002-11-11/2002-11-17/0

bugtraq, DoS