CVE-2017-11176
HIGHLinux Kernel <= 4.11.9 - Use-After-Free in mq_notify Netlink Socket Handling
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2017-11176. PoCs published by Lexfo, lexfo, c3r34lk1ll3r.
AI-analyzed exploit summary This exploit targets CVE-2017-11176, a Linux kernel vulnerability in the mq_notify mechanism, leading to a double sock_put() and potential local privilege escalation. It uses a race condition to manipulate kernel structures and achieve arbitrary code execution.
Description
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.
Exploits (7)
This exploit targets CVE-2017-11176, a Linux kernel vulnerability in the mq_notify mechanism, leading to a double sock_put() and potential local privilege escalation. It uses a race condition to manipulate kernel structures and achieve arbitrary code execution.
This repository contains a functional exploit for CVE-2017-11176, a Linux kernel vulnerability involving a double sock_put() in mq_notify. The exploit demonstrates privilege escalation by manipulating kernel structures and includes detailed technical analysis in referenced blog posts.
This repository contains a functional proof-of-concept exploit for CVE-2017-11176, a use-after-free vulnerability in the Linux kernel's mq_notify function. The exploit leverages race conditions and heap manipulation to achieve arbitrary code execution, with detailed implementation in C.
This repository contains a functional exploit for CVE-2017-11176, a Linux kernel vulnerability in the netlink subsystem. The exploit manipulates socket buffers and message queues to trigger a use-after-free condition, potentially leading to privilege escalation.
This repository contains a functional exploit for CVE-2017-11176, a Linux kernel vulnerability in the netlink subsystem. The exploit leverages a race condition to achieve local privilege escalation by manipulating kernel memory structures.
This repository contains a functional exploit for CVE-2017-11176, a use-after-free vulnerability in the Linux kernel's mq_notify function. The exploit manipulates Netlink sockets to trigger the vulnerability, demonstrating a denial-of-service (DoS) condition.
This repository contains a functional proof-of-concept exploit for CVE-2017-11176, a local privilege escalation vulnerability in the Linux kernel. The exploit triggers a use-after-free (UAF) condition in the netlink subsystem by flooding a socket and manipulating message queues.
References (12)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H