Paul Starzetz has reported some vulnerabilities in the Linux kernel, which potentially can be exploited by malicious, local users to gain escalated privileges.

The vulnerabilities are caused due to various errors within the Linux ELF binary loader when handling setuid binaries.

Successful exploitation may potentially allow execution of arbitrary code with root privileges.

The vulnerability affects the following versions:
* Linux kernel 2.4 branch up to to and including 2.4.27
* Linux kernel 2.6 branch up to to and including 2.6.8

Other versions may also be affected.

Solution
Some vulnerabilities are fixed in version 2.6.20-rc7.

Provided and/or discovered by
Paul Starzetz

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt

Deep Links
Links available to Secunia VIM customers