CVE-2009-2692

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does
not initialize all function pointers for socket operations in proto_ops
structures, which allows local users to trigger a NULL pointer dereference
and gain privileges by using mmap to map page zero, placing arbitrary code
on this page, and then invoking an unavailable operation, as demonstrated
by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.

Bugs

• <https://bugs.launchpad.net/bugs/413656&gt;