The 2014 Pwnie Nominee For Best Privilege Escalation Bug

Linux Futex Bug (CVE-2014-3153)

Credit: Comex and Geohot

How epic can a bug be if it is found by comex and then exploited by geohot? This exploited the Linux kernel to get root on the Samsung Galexy S5 and many Linux distributions.

(CVE-2014-3153)