CVE-2013-0268
Linux Kernel < 3.7.6 - Local Privilege Escalation via MSR Device Access
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-0268. PoCs published by spender.
AI-analyzed exploit summary This exploit leverages the /dev/cpu/*/msr interface to overwrite the SYSENTER_EIP_MSR register, allowing arbitrary kernel code execution in ring0. It requires root privileges and CONFIG_X86_MSR to be enabled.
Description
The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.
Exploits (1)
This exploit leverages the /dev/cpu/*/msr interface to overwrite the SYSENTER_EIP_MSR register, allowing arbitrary kernel code execution in ring0. It requires root privileges and CONFIG_X86_MSR to be enabled.