CVE-2017-7374 PoC — Linux kernel 安全漏洞

Source

https://github.com/ww9210/cve-2017-7374

Associated Vulnerability

Title:Linux kernel 安全漏洞 (CVE-2017-7374)
Description:Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel 4.10.7之前的版本中的fs/crypto/存在释放后重用漏洞。本地攻击者可通过撤回用于ext4、f2fs或ubifs加密的keyring密钥利用该漏洞造成拒绝服务（空指针逆向引用）或获取权限。

Readme

# cve-2017-7374

To trigger the vulnerability, we need a ext4 file system with encryption support and create a encrypted directory.

File Snapshot


 [4.0K]  /data/pocs/25e1d6f6f47c1998284b052e1e356c66182ae60a
├── [  60]  Makefile
├── [ 80K]  payload.h
├── [9.1K]  poc.c
├── [ 132]  README.md
├── [ 11K]  sha512.c
└── [1.0K]  sha512.h

0 directories, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!