Candidate: CVE-2005-0867 References: http://www.novell.com/linux/security/advisories/2005_18_kernel.html Description: Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file. Notes: horms> The Debian Packages for 2.6.8 and 2.6.11 do not appear to horms> have this bug. 2.4.27 does not include sysfs, and thus horma> also does not have this bug. jmm> The patch for the vulnerability in question can be found in the BTS Bugs: 306137 upstream: linux-2.6: N/A 2.6.8-sarge-security: N/A 2.4.27-sarge-security: N/A 2.4.19-woody-security: N/A 2.4.18-woody-security: N/A 2.4.17-woody-security: N/A 2.4.16-woody-security: N/A 2.4.17-woody-security-hppa: N/A 2.4.17-woody-security-ia64: N/A