3.0.31

[hubert3]

Should this be exploitable on 3.0.31?

Any pointers for what changes would be required?

Testing on Nexus 4.1.2 for educational purposes:

$ cat /proc/version
Linux version 3.0.31-g5894150 ([email protected]) (gcc version 4.6.x-google 20120106 (prerelease) (GCC) ) #1 PREEMPT Mon Sep 10 14:10:13 PDT 2012

$ ./poc
Creating target socket.... OK
0 + 0 sockets created
No icmp socket available

[fi01]

By default, Linux kernel is disabled about this feature. So it seems that you can use only KitKat or later even if your kernel is vulnerable. Please check this command:

$ cat /proc/sys/net/ipv4/ping_group_range
1 0

This is default value. And in this case you have no chance.