CVE-2014-3153 PoC — Linux kernel 提权漏洞

Source

https://github.com/lieanu/CVE-2014-3153

Associated Vulnerability

Title: Linux kernel 提权漏洞 (CVE-2014-3153)
Description:The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

Description

cve2014-3153 exploit for ubuntu x86

Readme

##Towelroot for Ubuntu x86

This exp has been tested on ubuntu 14.04 x86 and ubuntu 12.04.2 x86 successfully.

Learning CVE2014-3153 and towelroot.

Kernel through version 3.14, use `rbtree` to store rt_waiter(not `plist_node`), more complex! 

IA have diffrent thread_info with ARM!!

![](./final.png)

Source from geekben/towelroot and timwr/CVE-2014-3153

###Compile and run

```
$ gcc -fno-stack-protector -m32 -O0 -pthread mytowel.c -o mytowel
or simply
$ gcc -pthread mytowel.c -o mytowel
$ ./mytowel
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →