CVE-2017-8890
HIGHLinux Kernel < 3.2.89 - Double Free in inet_csk_clone_lock
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2017-8890. PoCs published by thinkycx, beraphin, 7043mcgeep.
AI-analyzed exploit summary This repository contains a working proof-of-concept exploit for CVE-2017-8890, a double-free vulnerability in the Linux kernel's IP multicast code. The exploit includes multiple variants targeting different kernel versions and architectures, demonstrating privilege escalation to root.
Description
The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.
Exploits (3)
This repository contains a working proof-of-concept exploit for CVE-2017-8890, a double-free vulnerability in the Linux kernel's IP multicast code. The exploit includes multiple variants targeting different kernel versions and architectures, demonstrating privilege escalation to root.
This repository contains a proof-of-concept exploit for CVE-2017-8890, a Linux kernel vulnerability involving a use-after-free in the netlink subsystem. The PoC demonstrates the vulnerability by creating and manipulating sockets to trigger the flaw.
This repository contains a proof-of-concept exploit for CVE-2017-8890, a double-free vulnerability in the Linux kernel's IPv4 multicast handling. The exploit triggers a kernel panic by manipulating socket operations to cause a double-free condition in the `mc_list` object.
References (9)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H