CVE-2022-2588 PoC — Linux kernel 安全漏洞

Source

https://github.com/BassamGraini/CVE-2022-2588

Associated Vulnerability

Title: Linux kernel 安全漏洞 (CVE-2022-2588)
Description:It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Readme

# CVE-2022-2588
Code adapted for one cpu, and with a vagrant file provided to boot up a vulnerable machine used for educational purposes.


To create a vulnerable machine, you need to have [Vagrant](https://www.vagrantup.com/) installed on your machine, then execute on the repository root:
   ```sh
   Vagrant up
   ```
Wait for installation and booting then :
   ```sh
   Vagrant ssh
   ```
 
Inside the Vm:
   ```sh
   cd CVE-2022-2588/ && gcc ./exploit.c -o exploit -lpthread 
   ./exploit
   ```
then:
   ```sh
   su ensimag
   password:  #ensimag
   #
   ```
The original exploit code : [here](https://github.com/Markakd/CVE-2022-2588)

To prevent the exploit try to uncomment the line 15 and 18 and restart the process.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →