CVE-2017-7358

This exploit leverages a race condition in LightDM's guest account creation script to escalate privileges to root. The attacker races the creation of a temporary directory to replace it with a symbolic link, ultimately hijacking the guest user's home directory and executing arbitrary code as root.

This PoC exploits CVE-2017-7358, a race condition in the LightDM guest session handling, to achieve local privilege escalation (LPE) by manipulating directory symlinks and user creation timing. The exploit involves monitoring /tmp for guest session directories and replacing them with symlinks to gain root access.