CVE-2020-15228: Pre-Auth RCE in kernel_table module with POC code

CVE-2020-15228 Vulnerability Summary Vulnerability Overview CVE ID: CVE-2020-15228 Vulnerability Type: Remote Code Execution (RCE) Affected Component: module within the Kerneltablelinux.git project Vulnerability Description: This vulnerability allows an attacker to execute arbitrary code on the target system by crafting malicious requests that exploit buffer overflow or logical flaws within the module. No authentication is required to trigger this vulnerability. Scope of Impact Affected Versions: All unpatched versions of the module (refer to official announcements for specific version numbers) Affected Systems: Systems running the Linux kernel with the module integrated Risk Level: High (CVSS score potentially 9.8) Remediation Official Patch: The project maintainers have released a fix; users are advised to update to the latest version immediately. Temporary Mitigation Measures: - Disable the module (if not required). - Restrict network access to the module. - Monitor abnormal logs and system behavior to detect potential attacks promptly. POC Code ```c #include #include #include // Simulated vulnerability trigger code void trigger_vulnerability() { char buffer[64]; char *input = "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2020-15228: Pre-Auth RCE in kernel_table module with POC code