CVE-2022-0847 PoC — Linux kernel 安全漏洞

Source

Associated Vulnerability

Description

DirtyPipe: Exploit for a new Linux vulnerability known as 'Dirty Pipe(CVE-2022-0847)' allows local users to gain root privileges. The vulnerability is tracked as CVE-2022-0847 and allows a non-privileged user to inject and overwrite data in read-only files, including SUID processes that run as root.

Readme

## About:
* Title: DirtyPipe
* Description: Exploit for a new Linux vulnerability known as 'Dirty Pipe(CVE-2022-0847)' allows local users to gain root privileges.
* AUTHOR: drapl0n
* Version: 1.0
* Category: Execution
* Target: Linux operating systems.
* Attackmodes: HID, Storage

## DirtyPipe: Exploit for a new Linux vulnerability known as 'Dirty Pipe(CVE-2022-0847)' allows local users to gain root privileges. The vulnerability is tracked as CVE-2022-0847 and allows a non-privileged user to inject and overwrite data in read-only files, including SUID processes that run as root.

### Directory Structure of payload components:
| FileName       | Directory                     |
| -------------- | ----------------------------- |
| payload.txt    | /payloads/                    |
| dirtypipe.c    | /payloads/library/            |

### LED Status:
* `SETUP`   : MAGENTA
* `ATTACK`  : YELLOW
* `FINISH`  : GREEN

#### Support me if you like my work:
* https://twitter.com/drapl0n 

File Snapshot

 [4.0K]  /data/pocs/a6ca3049322172082abeb4ade5a23c6f7fd7994f
├── [5.9K]  dirtypipe.c
├── [1.6K]  payload.txt
└── [ 987]  README.md

0 directories, 3 files

Remarks