actually the bug exploitable from 2.6.17-2.6.24 is CVE-2008-0600. CVE-2008-0009/10 only affect .23 and .24 (so only hardy is affected)
see http://lkml.org/lkml/2008/2/10/177 for details
(btw this bug is pretty scary, it works almost anywhere you can have a shell...)
actually the bug exploitable from 2.6.17-2.6.24 is CVE-2008-0600. CVE-2008-0009/10 only affect
.23 and .24 (so only hardy is affected)
see http:// lkml.org/ lkml/2008/ 2/10/177 for details
(btw this bug is pretty scary, it works almost anywhere you can have a shell...)