Submission + - linux-2.6: mmap() local root exploit (debian.org)
aquatix writes: "This exploit seems to work everywhere I try it, given it being a linux kernel version 2.6.17 to 2.6.24.1. If you don't trust you users [which you shouldn't ;)] better compile a new kernel without vmsplice."