The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4943
