Researchers have identified a new vulnerability in the Linux kernel which could enable an attacker to take complete control of a vulnerable system. The flaw is in all versions of the 2.4 and 2.6 Linux kernels. The Linux kernel vulnerability is a NULL pointer dereference vulnerability that derives from the kernel's failure to validate a function pointer before dereferencing it. The flaw, discovered by two members of the Google security team, has been fixed by a patch for the Linux kernel that was made available Thursday.