Georgi Guninski has reported a potential vulnerability in the Linux kernel, which may be exploited by malicious people to gain escalated privileges.

The vulnerability is caused due to an integer overflow in the "sys_epoll_wait()" function and can be exploited to cause a buffer overflow overwriting low kernel memory.

Successful exploitation may potentially allow execution of arbitrary code with escalated privileges. However, few applications reportedly use the affected part of the kernel memory space.

The vulnerability has been reported in versions 2.6 through 2.6.11.

Solution
Update to version 2.6.11.2 or later.
Further details available in Customer Area

Provided and/or discovered by
Georgi Guninski

Original Advisory
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.2

Deep Links
Links available in Customer Area