CVE-2021-3490 PoC — Linux kernel 缓冲区错误漏洞

介绍

The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution.

Compile: `gcc -o pwn pwn.c && gcc -o exploit exploit.c`

文件快照

备注