CVE-2013-1959
Linux Kernel < 3.8.9 - Privilege Escalation via uid_map and gid_map File Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-1959. PoCs published by Andrew Lutomirski.
AI-analyzed exploit summary This exploit leverages a user namespace vulnerability (CVE-2013-1959) to gain root privileges by manipulating `/proc/[pid]/uid_map` and executing a command with elevated permissions. It uses `unshare(CLONE_NEWUSER)` and futex synchronization to achieve privilege escalation.
Description
kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privileged process.
Exploits (1)
This exploit leverages a user namespace vulnerability (CVE-2013-1959) to gain root privileges by manipulating `/proc/[pid]/uid_map` and executing a command with elevated permissions. It uses `unshare(CLONE_NEWUSER)` and futex synchronization to achieve privilege escalation.