Devoted to hardware, software, IT issues, and information technology management

This recent SANS Handler's diary post says an exploit for a new Linux kernel vulnerability has been posted. The exploit provides privilege escalation and works on all 2.6.x kernels, although SANS says SELinux stops it from working.

Don't have many details yet, but SANS writes:

And if we didn't have enough for this weekend, an exploit for another Linux kernel privilege escalation vulnerability has been posted.The exploit seems to be working on all 2.6.x kernels and is not related to the previous exploit we've written about. From limited testing we've done so far, SELinux is blocking this exploit successfully, so the exploit didn't work on RedHat Enterprise Linux 4 machines we've tested this on. 

Also, the published exploit depends on the a.out support in the kernel (the CONFIG_BINFMT_AOUT has to be set), but the vulnerability can be exploited no matter if a.out is supported or not.