CVE-2016-0728
HIGH EXPLOITEDLinux kernel <4.4.1 - Privilege Escalation/DoS
Title source: llmExploitation Summary
CVE-2016-0728 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 13 public exploits from researchers including Federico Bento, Perception Point Team, nardholio.
AI-analyzed exploit summary This exploit leverages a reference counter overflow in the Linux kernel's keyring facility (CVE-2016-0728) to achieve local privilege escalation. It manipulates keyring references to trigger a use-after-free condition, overwriting kernel memory to execute arbitrary code (root shell).
Description
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.
Exploits (13)
This exploit leverages a reference counter overflow in the Linux kernel's keyring facility (CVE-2016-0728) to achieve local privilege escalation. It manipulates keyring references to trigger a use-after-free condition, overwriting kernel memory to execute arbitrary code (root shell).
This exploit leverages a reference count overflow in the Linux kernel's keyring subsystem (CVE-2016-0728) to achieve local privilege escalation by manipulating keyring references and triggering a use-after-free condition to overwrite kernel structures.
This repository contains a functional exploit for CVE-2016-0728, a use-after-free vulnerability in the Linux kernel's keyring facility. The exploit leverages reference counting manipulation and message queue allocation to achieve local privilege escalation (LPE).
This repository contains a functional exploit for CVE-2016-0728, a local privilege escalation vulnerability in the Linux kernel's keyring facility. The exploit manipulates reference counters and uses a crafted key_type structure to achieve arbitrary code execution in kernel context, ultimately spawning a root shell.
This repository contains a functional exploit PoC for CVE-2016-0728, a refcount leak and overflow bug in the Linux kernel leading to a use-after-free. The code includes a testbed to manipulate keyring refcounts, spray the heap, and achieve privilege escalation to a root shell.
This repository contains a functional exploit for CVE-2016-0728, a Linux kernel vulnerability involving a reference leak in keyring handling. The exploit manipulates keyring references and uses a use-after-free condition to achieve local privilege escalation by overwriting kernel structures.
This repository contains functional exploit code for CVE-2016-0728, a local privilege escalation vulnerability in the Linux kernel's keyring subsystem. The exploit leverages an integer overflow in the keyring reference counter to achieve arbitrary code execution in kernel context.
This repository contains a functional exploit for CVE-2016-0728, a Linux kernel vulnerability involving a reference leak in keyring handling. The exploit manipulates keyring references and triggers a use-after-free to achieve local privilege escalation.
This repository contains a functional exploit for CVE-2016-0728, a use-after-free vulnerability in the Linux kernel's keyring subsystem. The exploit manipulates reference counts and triggers a race condition to achieve local privilege escalation (LPE) by overwriting kernel structures.
This repository provides a detailed technical analysis of CVE-2016-0728, focusing on the reference count mishandling in the `join_session_keyring` function in the Linux kernel. It includes code audits, patch analysis, and a proof-of-concept to demonstrate the vulnerability.
This repository provides a detailed analysis and references for CVE-2016-0728, a Linux kernel vulnerability. It includes links to technical writeups and exploit code but does not contain functional exploit code itself.
This repository contains functional exploit code for CVE-2016-0728, a use-after-free vulnerability in the Linux kernel's keyring subsystem. The exploit demonstrates privilege escalation by manipulating keyring references and triggering a use-after-free condition.
This repository contains a functional exploit for CVE-2016-0728, a use-after-free vulnerability in the Linux kernel's keyring handling. The exploit manipulates keyring references and message queues to achieve local privilege escalation (LPE) to root.
References (42)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H