CVE-2020-29661 PoC — Linux kernel 资源管理错误漏洞

Source

https://github.com/TLD1027/CVE-2020-29661

Associated Vulnerability

Title: Linux kernel 资源管理错误漏洞 (CVE-2020-29661)
Description:A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

Description

Using Dirty Pagetable technology to reproduce CVE-2020-29661

Readme

# CVE-2020-29661
结合[Dirty Pagetable: A Novel Exploitation Technique To Rule Linux Kernel](https://yanglingxi1993.github.io/dirty_pagetable/dirty_pagetable.html)文章使用`Dirty Pagetable`方法

对`pid-uaf`漏洞复现

- CVE-2020-29661.md：漏洞复现报告
- backdoor：触发error后需要被`root`执行的文件
- boot.sh：启动脚本
- bzImage-5_6：内核镜像
- compose.sh：打包脚本
- config：内核编译config
- error：需要被执行的非法文件
- myexp.c：exp脚本
- rootfs.cpio：文件系统

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →