There exists multiple integer overflows in routines that handle copying in user supplied data for the Linux Sbus PROM driver. They allow for a local denial of service attack and possible code execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33678/linux.SbusPROM.txt
Source: https://packetstormsecurity.com/files/33678/linux.SbusPROM.txt.html