# Kernel Exploits

## [pp_key](pp_key)

Kernels: 3.8.0, 3.8.1, 3.8.2, 3.8.3, 3.8.4, 3.8.5, 3.8.6, 3.8.7, 3.8.8, 3.8.9, 3.9, 3.10, 3.11, 3.12, 3.13, 3.4.0, 3.5.0, 3.6.0, 3.7.0, 3.8.0, 3.8.5, 3.8.6, 3.8.9, 3.9.0, 3.9.6, 3.10.0, 3.10.6, 3.11.0, 3.12.0, 3.13.0, 3.13.1

## [overlayfs](overlayfs)

Kernels: 3.13, 3.16.0, 3.19.0

Executable Exploit: ofs_64
* Ubuntu 14.10 - Linux ubuntu 3.16.0-23-generic #31-Ubuntu x86_64  
* Ubuntu 14.04 - Linux ubuntu 3.13.0-24-generic #46-Ubuntu x86_64  
* Ubuntu 14.04 - Linux ubuntu 3.16.0-30-generic #40~14.04.1-Ubuntu x86_64

Executable Exploit: ofs_32
* Ubuntu 14.04 - Linux ubuntu 3.13.0-24-generic #46-Ubuntu x86_32  
* Ubuntu 14.10 - Linux ubuntu 3.16.0-23-generic #31-Ubuntu x86_32  

## [rawmodePTY](rawmodepty)

Kernels: 2.6.31, 2.6.32, 2.6.33, 2.6.34, 2.6.35, 2.6.36, 2.6.37, 2.6.38, 2.6.39, 3.14, 3.15

## [timeoutpwn](timeoutpwn)

Kernels: 3.4, 3.5, 3.6, 3.7, 3.8, 3.8.9, 3.9, 3.10, 3.11, 3.12, 3.13, 3.4.0, 3.5.0, 3.6.0, 3.7.0, 3.8.0, 3.8.5, 3.8.6, 3.8.9, 3.9.0, 3.9.6, 3.10.0, 3.10.6, 3.11.0, 3.12.0, 3.13.0, 3.13.1

Executable Exploit: timeoutpwn64
* Ubuntu 13.10 - Linux ubuntu 3.11.0-12-generic #19-Ubuntu x86_64  

## [perf_swevent](perf_swevent)

Kernels: 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.1.0, 3.2, 3.3, 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.4.6, 3.4.8, 3.4.9, 3.5, 3.6, 3.7, 3.8.0, 3.8.1, 3.8.2, 3.8.3, 3.8.4, 3.8.5, 3.8.6, 3.8.7, 3.8.8, 3.8.9

Executable Exploit: perf_swevent
* Ubuntu 12.04.2 - Linux ubuntu 3.5.0-23-generic #35-Ubuntu x86_64  

Executable Exploit: perf_swevent64
* Ubuntu 12.04.0 - Linux ubuntu 3.2.0-23-generic #36-Ubuntu x86_64  
* Ubuntu 12.04.1 - Linux ubuntu 3.2.0-29-generic #46-Ubuntu x86_64  
* Ubuntu 12.04.2 - Linux ubuntu 3.5.0-23-generic #35-Ubuntu x86_64  

## [msr](msr)

Kernels: 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31, 2.6.32, 2.6.33, 2.6.34, 2.6.35, 2.6.36, 2.6.37, 2.6.38, 2.6.39, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.1.0, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7.0, 3.7.6

## [memodipper](memodipper)

Kernels: 2.6.39, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.1.0

Executable Exploit: memodipper
* Ubuntu 11.10 - 3.0.0-12-generic-pae #20-Ubuntu x86_32  

Executable Exploit: memodipper64
* Ubuntu 11.10 - 3.0.0-12-server #20-Ubuntu x86_64  

## [american-sign-language](american-sign-language)

Kernels: 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31, 2.6.32, 2.6.33, 2.6.34, 2.6.35, 2.6.36

## [full-nelson](full-nelson)

Kernels: 2.6.31, 2.6.32, 2.6.35, 2.6.37

Executable Exploit: full-nelson
* Ubuntu 10.10 - 2.6.35-19-generic-pae #28-Ubuntu x86_32  
* Ubuntu 9.10 - 2.6.31-14-generic-pae #48-Ubuntu x86_32  

Executable Exploit: full-nelson64
* Ubuntu 10.10 - 2.6.35-19-server #28-Ubuntu x86_64  
* Ubuntu 9.10 - 2.6.31-14-server #48-Ubuntu x86_64  
* Ubuntu 10.04.1 - 2.6.32-24-server #39-Ubuntu x86_64  
* Ubuntu 10.04 - 2.6.32-21-server #32-Ubuntu x86_64  

## [half_nelson](half-nelson)

Kernels: 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31, 2.6.32, 2.6.33, 2.6.34, 2.6.35, 2.6.36

Executable Exploit: half-nelson3
* Ubuntu 10.04 - Linux ubuntu 2.6.32-21-server #32-Ubuntu x86_64  
* Ubuntu 9.10 - 2.6.31-14-server #48-Ubuntu x86_64  

## [rds](rds)

Kernels: 2.6.30, 2.6.31, 2.6.32, 2.6.33, 2.6.34, 2.6.35, 2.6.36

Executable Exploit: rds
* Debian 6 - Linux 2.6.31-1-686 32bit  
* Ubuntu 10.10 - 2.6.35-19-generic-pae #28-Ubuntu x86_32  
* Ubuntu 10.04 - 2.6.32-21-generic-pae #32-Ubuntu x86_32  
* Ubuntu 10.04.1 - 2.6.32-24-generic-pae #39-Ubuntu x86_32  
* Ubuntu 9.10 - 2.6.31-14-generic-pae #48-Ubuntu x86_32  

Executable Exploit: rds64
* Debian 6 - Linux 2.6.31-1-amd64 x86_64  
* Debian 6 - Linux 2.6.32-trunk-amd64 x86_64  
* Debian 6 - Linux 2.6.34-1-amd64 x86_64  
* Debian 6 - Linux 2.6.35-trunk-amd64 x86_64  
* Ubuntu 10.10 - 2.6.35-19-server #28-Ubuntu x86_64  
* Ubuntu 10.04.1 - 2.6.32-24-server #39-Ubuntu x86_64  
* Ubuntu 10.04 - 2.6.32-21-server #32-Ubuntu x86_64  
* Ubuntu 9.10 - 2.6.31-14-server #48-Ubuntu x86_64  

## [pktcdvd](pktcdvd)

Kernels: 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31, 2.6.32, 2.6.33, 2.6.34, 2.6.35, 2.6.36

## [ptrace_kmod2](ptrace_kmod2)

Kernels: 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31, 2.6.32, 2.6.33, 2.6.34

Executable Exploit: ptrace_kmod2-64
* Debian 6 - Linux 2.6.32-trunk-amd64 x86_64  
* Debian 6 - Linux 2.6.33-2-amd64 x86_64  
* Debian 6 - Linux 2.6.34-1-amd64 x86_64  
* Debian 6 - Linux 2.6.35-trunk-amd64 x86_64  
* Ubuntu 10.10 - 2.6.35-19-server #28-Ubuntu x86_64  
* Ubuntu 10.04.1 - 2.6.32-24-server #39-Ubuntu x86_64  
* Ubuntu 10.04 - 2.6.32-21-server #32-Ubuntu x86_64  

## [video4linux](video4linux)

Kernels: 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31, 2.6.32, 2.6.33

## [can_bcm](can_bcm)

Kernels: 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31, 2.6.32, 2.6.33, 2.6.34, 2.6.35, 2.6.36

Executable Exploit: can_bcm
* Ubuntu 10.04.1 - 2.6.32-24-generic #39-Ubuntu x86_32  

## [reiserfs](reiserfs)

Kernels: 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31, 2.6.32, 2.6.33, 2.6.34

## [do_pages_move](do_pages_move)

Kernels: 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31

## [pipe.c_32bit](pipe.c_32bit)

Kernels: 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.4.10, 2.4.11, 2.4.12, 2.4.13, 2.4.14, 2.4.15, 2.4.16, 2.4.17, 2.4.18, 2.4.19, 2.4.20, 2.4.21, 2.4.22, 2.4.23, 2.4.24, 2.4.25, 2.4.26, 2.4.27, 2.4.28, 2.4.29, 2.4.30, 2.4.31, 2.4.32, 2.4.33, 2.4.34, 2.4.35, 2.4.36, 2.4.37, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30, 2.6.31

## [udp_sendmsg_32bit](udp_sendmsg_32bit)

Kernels: 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19

## [sock_sendpage](sock_sendpage)

Kernels: 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.4.10, 2.4.11, 2.4.12, 2.4.13, 2.4.14, 2.4.15, 2.4.16, 2.4.17, 2.4.18, 2.4.19, 2.4.20, 2.4.21, 2.4.22, 2.4.23, 2.4.24, 2.4.25, 2.4.26, 2.4.27, 2.4.28, 2.4.29, 2.4.30, 2.4.31, 2.4.32, 2.4.33, 2.4.34, 2.4.35, 2.4.36, 2.4.37, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30


## [sock_sendpage2](sock_sendpage2)

Kernels: 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.4.10, 2.4.11, 2.4.12, 2.4.13, 2.4.14, 2.4.15, 2.4.16, 2.4.17, 2.4.18, 2.4.19, 2.4.20, 2.4.21, 2.4.22, 2.4.23, 2.4.24, 2.4.25, 2.4.26, 2.4.27, 2.4.28, 2.4.29, 2.4.30, 2.4.31, 2.4.32, 2.4.33, 2.4.34, 2.4.35, 2.4.36, 2.4.37, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29, 2.6.30

## [exit_notify](exit_notify)

Kernels: 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29

## [udev](udev)

Kernels: 2.6.25, 2.6.26, 2.6.27, 2.6.28, 2.6.29

## [ftrex](ftrex)

Kernels: 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22

## [vmsplice2](vmsplice2)

Kernels: 2.6.23, 2.6.24

## [vmsplice1](vmsplice1)

Kernels: 2.6.17, 2.6.18, 2.6.19, 2.6.20, 2.6.21, 2.6.22, 2.6.23, 2.6.24, 2.6.24.1

## [h00lyshit](h00lyshit)

Kernels: 2.6.8, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.6.16

## [raptor_prctl](raptor_prctl)

Kernels: 2.6.13, 2.6.14, 2.6.15, 2.6.16, 2.6.17

## [elflbl](elflbl)

Kernels: 2.4.29

## [caps_to_root](caps_to_root)

Kernels: 2.6.34, 2.6.35, 2.6.36

## [mremap_pte](mremap_pte)

Kernels: 2.4.20, 2.2.24, 2.4.25, 2.4.26, 2.4.27

## [krad3](krad3)

Kernels: 2.6.5, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11