Linux 2.6 kernel versions below 2.6.19 32bit ip_append_data() ring() root exploit.
6b3854b9705b083f7f9e7faa054eaf8f3ab87452b3fd6f314d6f943c4e92d17a
Linux kernel versions 2.4 and 2.6 (32bit) sock_sendpage() local ring0 root exploit. The author tested this on RedHat Linux 9.0, Fedora core 4~11, Whitebox 4, and CentOS 4.x.
82b09f3985e0e59bf4837b7dd04bfb1b2c9ca1279cca9b71001675ec2812bba3