CVE-2016-4997

This Metasploit module exploits CVE-2016-4997, a Linux kernel netfilter privilege escalation vulnerability affecting Ubuntu 16.04 with kernel 4.4.0-21-generic. It compiles and executes a C-based exploit to gain elevated privileges by manipulating netfilter structures.

This exploit leverages a vulnerability in the IPv6 netfilter subsystem of the Linux kernel (CVE-2016-4997) to escalate privileges via an IP6T_SO_SET_REPLACE compat setsockopt call. It requires the ip6_tables module to be loaded and demonstrates a successful local privilege escalation to root.

This Metasploit module exploits a netfilter bug in Linux kernels before 4.6.3, specifically targeting Ubuntu 16.04 with kernel 4.4.0-21-generic. It leverages a privilege escalation vulnerability (CVE-2016-4997) by compiling and executing a crafted exploit on the target system.