The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
mitre·CWE-276·Published 1999-03-01