关联漏洞
描述
Proof of concept source code and misc files for my CVE-2025-21692 exploit, kernel version 6.6.75
介绍
# CVE-2025-21692-poc
This is code for my exploit of the [CVE-2025-21692](https://nvd.nist.gov/vuln/detail/CVE-2025-21692) ets qdisc vulnerability, which accompanies my [writeup](https://volticks.github.io/CVE-2025-21692-nday-writeup/).
*Bear in mind that as specified in the writeup the kernel version was patched to enable the vulnerability, 6.6.75 is not vulnerable without removing the patch, but on older, vulnerable kernels this can work*.
The initramfs used for testing can be found [here](https://github.com/hoefler02/CVE-2025-21756) (thanks hoefler).
The kernel config used is present in this repo with the adjustments made.
The kernel and initramfs used to test the final exploit was build with [like-dbg](https://github.com/0xricksanchez/like-dbg).
Hope this is useful :).
文件快照
[4.0K] /data/pocs/54cac215fd920f2898f2ae16e03ede3d7513504a
├── [ 257] compress.sh
├── [116K] config-vsock
├── [ 35K] exp_2.c
├── [4.0K] post_imgs
│ ├── [102K] 1.png
│ └── [2.4M] exp_fin.gif
├── [ 788] README.md
├── [ 387] run_qemu_like_dbg.sh
├── [ 647] run_qemu.sh
├── [ 61K] writeup.md
└── [949K] x
1 directory, 10 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问,请发送邮箱到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
3. 神龙已为您对POC代码进行快照,为了长期维护,请考虑为本地POC付费,感谢您的支持。