CVE-2016-8655 PoC — Linux kernel 资源管理错误漏洞

Source

https://github.com/martinmullins/CVE-2016-8655_Android

Associated Vulnerability

Title:Linux kernel 资源管理错误漏洞 (CVE-2016-8655)
Description:Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.

Description

Android attempt at PoC CVE-2016-8655

Readme

# CVE-2016-5195 GoldFish 3.4
* This works on the goldfish 3.4 Emulator
* Initroot: https://alephsecurity.com/2017/06/07/initroot-moto/ has been released for my device (harpia), so I have stopped porting the exploit to my device (harpia/...).
* I have learnt a large amount from working on this project, but initroot appears to be a better option.

* goldifsh/... has the files to execute this exploit on android.
* goldfish/runme.sh has the steps to deploy and execute the exploit
* mod_exploit/ is a kernel module that creates the exploit shell code (see expmod.c) extracted by goldfish/..
* As a PoC the exploit will call trace_printk to print some text to /sys/kernel/debug/tracing/trace, the correct trace_printk pointer for your goldfish kernel should be set in expmod.c

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!