Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.
Affected Platforms
Redhat Enterprise LinuxRedhat Enterprise Linux DesktopRedhat Fedora CoreLinux Linux KernelConectiva Linux