Common Vulnerabilities and Exposures assigned an identifier CVE-2007-5966 to the following vulnerability: Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information. Refences: http://www.securityfocus.com/archive/1/archive/1/485282/100/0/threaded http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.10 https://issues.rpath.com/browse/RPL-2038 http://www.debian.org/security/2007/dsa-1436 http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html http://www.ubuntu.com/usn/usn-574-1 http://www.securityfocus.com/bid/26880 http://www.frsirt.com/english/advisories/2007/4225 http://secunia.com/advisories/28105 http://secunia.com/advisories/28088 http://secunia.com/advisories/28141 http://secunia.com/advisories/28706 http://secunia.com/advisories/28806
mrg-1 kernel has 5a7780e725d1bb4c3094fcc12f1c5c5faea1e988 fix.
This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2009:1193 https://rhn.redhat.com/errata/RHSA-2009-1193.html
More info can be found here: https://www.redhat.com/security/data/cve/CVE-2007-5966.html
This issue has been addressed in following products: Red Hat Enterprise Linux 5.2 Z Stream Via RHSA-2010:0079 https://rhn.redhat.com/errata/RHSA-2010-0079.html