Backports.org has released updated Kernel 2.6.0 packages for Debian GNU/Linux 3.0, which fixes the mremap() local root vulnerability.

Here the apt sources:

# Kernel 2.6.0
deb http://www.backports.org/debian stable kernel-image-2.6.0-i386
deb-src http://www.backports.org/debian stable kernel-image-2.6.0-i386
deb http://www.backports.org/debian stable kernel-source-2.6.0
deb-src http://www.backports.org/debian stable kernel-source-2.6.0