It's a local exploit, which are not uncommon in Linux.