The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a negative first argument.
- http://www.redhat.com/support/errata/RHSA-2005-808.html
No PoCs found on GitHub currently.