CVE-2022-2078 PoC — Linux kernel 安全漏洞

Source

https://github.com/delsploit/CVE-2022-2078

Associated Vulnerability

Title:Linux kernel 安全漏洞 (CVE-2022-2078)
Description:Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞。攻击者利用该漏洞通过 nft_set_desc_concat_parse() 触发缓冲区溢出，从而导致拒绝服务并可能运行代码。

Readme

# CVE-2022-2078

```
$ ./poc
...
[+] get_set
leak_buffer:
  0000  30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f  0123456789:;<=>?
  0010  28 00 00 00 00 02 0a 8f 68 8b a2 be 40 ac 70 8c  (.......h...@.p.
  0020  ff ff ff ff 00 6c b5 81                          .....l..
[+] kernel=0xffffffff8c70ac40
```

File Snapshot


 [4.0K]  /data/pocs/8455ac284c89c4e8cbf11ee48cb74977d65b8a87
├── [  85]  boot.sh
├── [  89]  dbg_boot.sh
├── [ 15K]  helper.c
├── [ 569]  helper.h
├── [ 309]  Makefile
├── [2.0K]  poc.c
└── [ 306]  README.md

0 directories, 7 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!