CVE-2009-2698

This repository contains a functional exploit for CVE-2009-2698, a local privilege escalation vulnerability in the Linux kernel. The exploit code (36108.c) is compiled and executed on CentOS 4.8, successfully escalating privileges from a regular user to root.

This exploit targets CVE-2009-2698, a vulnerability in the Linux kernel's udp_sendmsg() function, allowing local privilege escalation. The code references a proof-of-concept (PoC) for x86/x64 architectures, with additional resources provided for compilation and execution.

This exploit leverages a vulnerability in the Linux kernel (< 2.6.19) where the `udp_sendmsg` function can be manipulated via a callback function in `dst_entry`/`rtable` to escalate privileges to root. It uses inline assembly to set UID/GID values to zero, achieving local privilege escalation.

This exploit targets a vulnerability in the Linux kernel (CVE-2009-2698) by manipulating the `ip_append_data()` function to achieve local privilege escalation to root. It uses a combination of memory manipulation and socket operations to trigger the vulnerability and execute arbitrary kernel code.