CVE-2021-22600

This repository provides a technical analysis and privilege probe for CVE-2021-22600, demonstrating how AF_PACKET socket creation and PACKET_RX_RING configuration behave under different privilege levels (user vs. root). It includes a detailed explanation of kernel checks for CAP_NET_RAW and the implications of exploitation.

This repository contains functional exploit code for CVE-2021-22600, leveraging the DirtyPagetable technique to achieve local privilege escalation (LPE) in the Linux kernel. The exploit involves manipulating kernel memory structures through socket operations and signalfd spraying.