CVE-2023-52927 PoC — Linux kernel 安全漏洞

介绍

# CVE-2023-52927

LPE exploit for CVE-2023-52927 - a Use-After-Free vulnerability in netfilter.

My write-up of the vulnerability: [CVE-2023-52927 - Turning a Forgotten Syzkaller Report into kCTF Exploit](https://seadragnol.github.io/posts/CVE-2023-52927/)

Reproducer: [KASAN trigger poc](./reproducer/)

## Building

Install dependencies:

```text
make prerequisites
```

Build exploit:

```text
make exploit
```

## Target

kCTF cos-109-17800.436.33 machine:

- Kernel image (bzImage): <https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/bzImage>
- Kernel image (vmlinux): <https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/vmlinux.gz>
- Kernel config: <https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/.config>
    - -> derived from COS config: <https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/lakitu_defconfig>
- Source code info: <https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/COMMIT_INFO>

文件快照

备注