ysanatomic

4 exploits Active since Apr 2022
CVE-2024-0582 NOMISEC HIGH WORKING POC
Linux Kernel - Memory Corruption
A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.
101 stars
CVSS 7.8
CVE-2023-2598 NOMISEC HIGH WORKING POC
Linux Kernel < 6.3.2 - Out-of-Bounds Write
A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.
92 stars
CVSS 7.8
CVE-2022-32250 NOMISEC HIGH WORKING POC
Linux Kernel < 4.9.318 - Use After Free
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
9 stars
CVSS 7.8
CVE-2022-1015 NOMISEC MEDIUM WORKING POC
Linux Kernel < 5.16.18 - Out-of-Bounds Write
A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.
4 stars
CVSS 6.6