[ILUG] kernel security hole

[Brian Scanlan]

Hi,

>  So I'm getting the impression that some of the earlier with some of the
>  earlier kernels from 2.6.17 - 2.6.22 the exploit doesn't work as
>  intended and instead locks up the machine.

Three issues were recently identified, which may be causing the confusion:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0009 affects
2.6.22 - 2.6.24 - no exploit is publically available.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0010 affects
2.6.23 - 2.6.24 - a public root exploit is available (
http://www.milw0rm.com/exploits/5093)

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0600 affects
2.6.17 - 2.6.24.1 - a public root exploit is available
(http://www.milw0rm.com/exploits/5092)

Brian.