Ну ни хрена себе, а ЛОР спит

http://www.eweek.com/print_article/0,3048,a=113591,00.asp

Researchers Find Serious Vulnerability in Linux Kernel



The vulnerability itself is an integer overflow in the brk( ) system call, which is a memory-management function. When the call invokes the do_brk( ) function, using user-supplied address and length variables, the call does not check for integer overflows when adding the variables, according to an analysis of the problem by Symantec Corp., based in Cupertino, Calif.