Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2025-21756 PoC — Linux kernel 资源管理错误漏洞

Source
Associated Vulnerability
Title:Linux kernel 资源管理错误漏洞 (CVE-2025-21756)
Description:Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在资源管理错误漏洞,该漏洞源于vsock在传输重新分配时未正确保留绑定,导致释放后重用。
Description
Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!
File Snapshot

[4.0K] /data/pocs/2ad6f361e5dd47030ae6f2e5cd695d284d0a76fb ├── [ 170] compress.sh ├── [1.7K] extract-image.sh ├── [ 14] flag.txt ├── [4.0K] initramfs │   ├── [4.0K] bin │   │   ├── [1.0M] busybox │   │   └── [ 7] sh -> busybox │   ├── [4.0K] etc │   │   ├── [4.0K] init.d │   │   │   └── [ 410] rcS │   │   ├── [ 85] inittab │   │   ├── [ 23] motd │   │   └── [ 13] resolv.conf -> /proc/net/pnp │   ├── [ 11] init -> bin/busybox │   ├── [ 10] sbin -> ./usr/sbin │   ├── [4.0K] usr │   │   ├── [ 6] bin -> ../bin │   │   └── [4.0K] sbin │   │   ├── [ 17] addgroup -> ../../bin/busybox │   │   ├── [ 17] add-shell -> ../../bin/busybox │   │   ├── [ 17] adduser -> ../../bin/busybox │   │   ├── [ 17] arping -> ../../bin/busybox │   │   ├── [ 17] brctl -> ../../bin/busybox │   │   ├── [ 17] chat -> ../../bin/busybox │   │   ├── [ 17] chpasswd -> ../../bin/busybox │   │   ├── [ 17] chroot -> ../../bin/busybox │   │   ├── [ 17] crond -> ../../bin/busybox │   │   ├── [ 17] delgroup -> ../../bin/busybox │   │   ├── [ 17] deluser -> ../../bin/busybox │   │   ├── [ 17] dhcprelay -> ../../bin/busybox │   │   ├── [ 17] dnsd -> ../../bin/busybox │   │   ├── [ 17] ether-wake -> ../../bin/busybox │   │   ├── [ 17] fakeidentd -> ../../bin/busybox │   │   ├── [ 17] fbset -> ../../bin/busybox │   │   ├── [ 17] fdformat -> ../../bin/busybox │   │   ├── [ 17] fsfreeze -> ../../bin/busybox │   │   ├── [ 17] ftpd -> ../../bin/busybox │   │   ├── [ 17] httpd -> ../../bin/busybox │   │   ├── [ 17] i2cdetect -> ../../bin/busybox │   │   ├── [ 17] i2cdump -> ../../bin/busybox │   │   ├── [ 17] i2cget -> ../../bin/busybox │   │   ├── [ 17] i2cset -> ../../bin/busybox │   │   ├── [ 17] i2ctransfer -> ../../bin/busybox │   │   ├── [ 17] ifplugd -> ../../bin/busybox │   │   ├── [ 17] inetd -> ../../bin/busybox │   │   ├── [ 17] killall5 -> ../../bin/busybox │   │   ├── [ 17] loadfont -> ../../bin/busybox │   │   ├── [ 17] lpd -> ../../bin/busybox │   │   ├── [ 17] mim -> ../../bin/busybox │   │   ├── [ 17] nanddump -> ../../bin/busybox │   │   ├── [ 17] nandwrite -> ../../bin/busybox │   │   ├── [ 17] nbd-client -> ../../bin/busybox │   │   ├── [ 17] nologin -> ../../bin/busybox │   │   ├── [ 17] ntpd -> ../../bin/busybox │   │   ├── [ 17] partprobe -> ../../bin/busybox │   │   ├── [ 17] popmaildir -> ../../bin/busybox │   │   ├── [ 17] powertop -> ../../bin/busybox │   │   ├── [ 17] rdate -> ../../bin/busybox │   │   ├── [ 17] rdev -> ../../bin/busybox │   │   ├── [ 17] readahead -> ../../bin/busybox │   │   ├── [ 17] readprofile -> ../../bin/busybox │   │   ├── [ 17] remove-shell -> ../../bin/busybox │   │   ├── [ 17] rtcwake -> ../../bin/busybox │   │   ├── [ 17] seedrng -> ../../bin/busybox │   │   ├── [ 17] sendmail -> ../../bin/busybox │   │   ├── [ 17] setfont -> ../../bin/busybox │   │   ├── [ 17] setlogcons -> ../../bin/busybox │   │   ├── [ 17] svlogd -> ../../bin/busybox │   │   ├── [ 17] telnetd -> ../../bin/busybox │   │   ├── [ 17] tftpd -> ../../bin/busybox │   │   ├── [ 17] ubiattach -> ../../bin/busybox │   │   ├── [ 17] ubidetach -> ../../bin/busybox │   │   ├── [ 17] ubimkvol -> ../../bin/busybox │   │   ├── [ 17] ubirename -> ../../bin/busybox │   │   ├── [ 17] ubirmvol -> ../../bin/busybox │   │   ├── [ 17] ubirsvol -> ../../bin/busybox │   │   ├── [ 17] ubiupdatevol -> ../../bin/busybox │   │   └── [ 17] udhcpd -> ../../bin/busybox │   └── [764K] x ├── [116K] lts-6.6.75.config ├── [219K] pwned.gif ├── [ 288] readme.md ├── [ 323] run.sh └── [9.6K] x.c 8 directories, 76 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.