ID:4079 - Exploit for Permissions, Privileges, and Access Controls in Linux kernel - CVE-2014-4943

Link to public exploit:

Vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

Remediation