The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
The default permissions
Vulnerability
CVE-1999-0426
NVD
Update to v2.0.36