Debian 3.1: DSA 1097-1 Critical: Kernel Local And Remote Threats

"Solar Designer" discovered that arithmetic computations in netfilter's
do_replace() function can lead to a buffer overflow and the execution of
arbitrary code. However, the operation requires CAP_NET_ADMIN privileges,
which is only an issue in virtualization systems or fine grained access
control systems.

CVE-2006-0039

"Solar Designer" discovered a race condition in netfilter's
do_add_counters() function, which allows information disclosure of
kernel memory by exploiting a race condition. Like CVE-2006-0038,
it requires CAP_NET_ADMIN privileges.

CVE-2006-0741

Intel EM64T systems were discovered to be susceptible to a local
DoS due to an endless recursive fault related to a bad ELF entry
address.

CVE-2006-0742

incorrectly declared die_if_kernel() function as "does never
return" which could be exploited by a local attacker resulting in
a kernel crash.

CVE-2006-1056

AMD64 machines (and other 7th and 8th generatio...