CVE-2011-1021
Linux Kernel < 3.0 - Arbitrary Kernel Memory Write via ACPI Debugfs Custom Method
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-1021. PoCs published by Jon Oberheide.
AI-analyzed exploit summary This exploit leverages a world-writable ACPI custom_method file in Linux kernels < 2.6.37-rc2 to inject malicious ACPI methods, overriding the LID device status query to overwrite kernel memory (sys_futimesat) and escalate privileges to root.
Description
drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custom_method file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347.
Exploits (1)
This exploit leverages a world-writable ACPI custom_method file in Linux kernels < 2.6.37-rc2 to inject malicious ACPI methods, overriding the LID device status query to overwrite kernel memory (sys_futimesat) and escalate privileges to root.