ysanatomic

4 exploits Active since Apr 2022
CVE-2024-0582 NOMISEC HIGH WORKING POC
Linux Kernel 6.4-6.6.4 - Use-After-Free in io_uring Buffer Ring Registration
A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.
101 stars
CVSS 7.8
CVE-2023-2598 NOMISEC HIGH WORKING POC
Linux Kernel 6.3-6.3.2 - Use-After-Free in io_uring Buffer Registration
A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.
92 stars
CVSS 7.8
CVE-2022-32250 NOMISEC HIGH WORKING POC
Linux Kernel 4.1-5.18.1 - Use-After-Free in nf_tables_api.c
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
9 stars
CVSS 7.8
CVE-2022-1015 NOMISEC MEDIUM WORKING POC
Linux Kernel < 5.16.18 - Out-of-bounds Write in netfilter nf_tables_api
A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.
4 stars
CVSS 6.6