NULL Security Flaw Threatens Linux
Page 1 of 1
From the 'this is not a drill' files:
Linux users take note: we're all at risk from a kernel privilege escalation flaw. No it's not the end of the world that will lead to massive remote exploits and all Linux servers being pwnd. But it is something to be concerned about.
The flaw is a NULL pointer error that exists in all versions of the Linux kernel released since 2001. No that's not a typo.
"Tavis Ormandy and myself have recently found and investigated a Linux kernel vulnerability," Security Researcher Julien Tinnes wrote in his advisory. "It affects all 2.4 and 2.6 kernels since 2001 on all architectures. We believe this is the public vulnerability affecting the greatest number of kernel versions."