CVE-2025-39682 PoC — Linux kernel 安全漏洞

Description

A variant of CVE-2024-58239

介绍

# CVE-2025-39682 exploit on kernelCTF mitigation instance
This is also my first (? idk, this is a variant of CVE-2024-58239) 1-day exploit.

Patch: [tls: fix handling of zero-length records on the rx_list](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/tls?id=62708b9452f8eb77513115b17c4f8d1a22ebf843)

This CVE was used in `exp398` and and `exp403`. [kernelCTF spreadsheet](https://docs.google.com/spreadsheets/d/e/2PACX-1vS1REdTA29OJftst8xN5B5x8iIUcxuK6bXdzF8G1UXCmRtoNsoQ9MbebdRdFnj6qZ0Yd7LwQfvYC2oF/pubhtml#).

For folder structures and how to run the exploit, refer to my [CVE-2024-58239 repo](https://github.com/khoatran107/cve-2024-58239).

I modify my previous exploit "a little bit". And it works on the same `mitigation-v4-6.6` instance, with a better success rate.

Success rate: 79/100.

Run on kernelCTF instance:
![image](https://hackmd.io/_uploads/BkgxSYo6xl.png)

Detailed write-up coming later, for both CVEs.

文件快照

备注