CVE-2021-4154 PoC — Linux kernel 资源管理错误漏洞

Source

https://github.com/Markakd/CVE-2021-4154

Associated Vulnerability

Title: Linux kernel 资源管理错误漏洞 (CVE-2021-4154)
Description:A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.

Description

CVE-2021-4154 exploit

Readme

# CVE-2021-4154

This bug was fix in https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b

This exploit works on most pre-patch kernels for:

* CentOS 8 kernels higher than linux-4.18.0-305.el8
* Debian 11 kernels higher than 5.10.0-8
* Fedora 31/32/33 kernels higher than 5.3.7-301.fc31
* Ubuntu 18/20 kernels higher than 5.4.0-84 and 5.11.0-37.41

Please feel free to send a PR to update README if you find it could work on other kernels.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →