CVE-2017-15649
HIGHLinux Kernel < 4.13.6 - Use-After-Free via Packet Fanout Race Condition
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2017-15649. PoCs published by SecuriTeam.
AI-analyzed exploit summary This is a working proof-of-concept exploit for CVE-2017-15649, a use-after-free vulnerability in the Linux Kernel's AF_PACKET implementation. The exploit triggers a race condition between fanout_add and bind operations, leading to a kernel crash or potential privilege escalation.
Description
net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free, a different vulnerability than CVE-2017-6346.
Exploits (1)
This is a working proof-of-concept exploit for CVE-2017-15649, a use-after-free vulnerability in the Linux Kernel's AF_PACKET implementation. The exploit triggers a race condition between fanout_add and bind operations, leading to a kernel crash or potential privilege escalation.
References (14)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H