Linux Kernel Prior to 2.6.24.2 'vmsplice_to_pipe()' Local Privilege Escalation Vulnerability

Linux Kernel Prior to 2.6.24.2 'vmsplice_to_pipe()' Local Privilege Escalation Vulnerability

References:

[PATCH] splice: missing user pointer access verification (CVE-2008-0009/10) (Linux)
SARA Malware (si0ux)
CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference (Wojciech Purczynski)
[USN-577-1] Linux kernel vulnerability (Ubuntu)
Linux 2.6.24.2 Changelog (Linux)
RHSA-2008:0129-5 kernel security update (Red Hat)

Privacy Statement
Copyright 2010, SecurityFocus