CVE-2021-42008 PoC — Linux kernel 缓冲区错误漏洞

Source

https://github.com/numanturle/CVE-2021-42008

Associated Vulnerability

Title:Linux kernel 缓冲区错误漏洞 (CVE-2021-42008)
Description:Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 5.13.13之前版本存在缓冲区错误漏洞，该漏洞源于内核中的drivers/net/hamradio/6pack.c中的decode_data 函数有一个slab越界写入，攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。

Description

Exploiting A 16-Year-Old Vulnerability In The Linux 6pack Driver

Readme

# CVE-2021-42008
Exploiting A 16-Year-Old Vulnerability In The Linux 6pack Driver


# Reference

https://syst3mfailure.io/sixpack-slab-out-of-bounds

File Snapshot


 [4.0K]  /data/pocs/a0e76afffdc4b09de0397d5f1635fdecbd279def
├── [ 14K]  6pack_exploit.c
└── [ 149]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!