LLfam

2 exploits Active since Jun 2023
CVE-2024-1086 NOMISEC HIGH WORKING POC
Linux Kernel < 5.15.149 - Use After Free
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
21 stars
CVSS 7.8
CVE-2023-2598 NOMISEC HIGH WORKING POC
Linux Kernel < 6.3.2 - Out-of-Bounds Write
A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.
1 stars
CVSS 7.8