Secure testing team - Aug 2009 - Bug#541496: linux-source-2.6.30: Local privilege escalation (incorrect proto_ops initializations)

Package: linux-source-2.6.30
Version: 2.6.30-4
Severity: critical
Tags: security
Justification: root security hole


See:
  http://seclists.org/fulldisclosure/2009/Aug/0173.html

See the link for a patch from Linus at the bottom.  Please back patch
at your earliest convenience.

thank you,
tim


-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, ''unstable'')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages linux-source-2.6.30 depends on:
ii  binutils              2.19.51.20090805-1 The GNU assembler, linker and bina
ii  bzip2                 1.0.5-3            high-quality block-sorting file co

Versions of packages linux-source-2.6.30 recommends:
ii  gcc                           4:4.3.3-9  The GNU C compiler
ii  libc6-dev [libc-dev]          2.9-24     GNU C Library: Development Librari
ii  make                          3.81-6     An utility for Directing compilati

Versions of packages linux-source-2.6.30 suggests:
ii  kernel-package            12.017         A utility for building Linux kerne
ii  libncurses5-dev [ncurses- 5.7+20090803-1 developer''s libraries and
docs for
pn  libqt3-mt-dev             <none>         (no description available)

-- no debconf information