Exploitation Summary
EIP tracks 2 public exploits for CVE-2021-33624. PoCs published by benschlueter.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2021-33624, a type confusion vulnerability in the Linux kernel's BPF verifier. The exploit leverages speculative execution to leak kernel memory by mis-training the branch predictor using DIV instructions.
Description
In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db.
Exploits (2)
This repository contains a functional proof-of-concept exploit for CVE-2021-33624, a type confusion vulnerability in the Linux kernel's BPF verifier. The exploit leverages speculative execution to leak kernel memory by mis-training the branch predictor using DIV instructions.
This repository contains a functional proof-of-concept exploit for CVE-2021-33624, a type confusion vulnerability in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. The exploit leverages speculative execution to leak kernel memory by mis-training the branch predictor using DIV instructions.
References (5)
Scores
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N