Via the Full Disclosure mailing list, looks like there's a exploitable hole in Linux 2.6.30 /SELinux/RHEL5 test kernel. I'm not 100% familiar with this, but being it's called "test kernel", I'm assuming this isn't properly released or in use in the real world yet. Link has more details.