Exploitation Summary
EIP tracks 5 public exploits for CVE-2022-0995.
PoCs published by Bonfee, 1nzag, AndreevSemen, including Metasploit module exploits/linux/local/cve_2022_0995_watch_queue.
AI-analyzed exploit summary This is a working exploit for CVE-2022-0995, an heap out-of-bounds write in the watch_queue Linux kernel component. It targets Ubuntu 21.10 with kernel 5.13.0-37 and achieves local privilege escalation by corrupting msg_msg structures and leveraging a ROP chain.
Description
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
Exploits (5)
This is a working exploit for CVE-2022-0995, an heap out-of-bounds write in the watch_queue Linux kernel component. It targets Ubuntu 21.10 with kernel 5.13.0-37 and achieves local privilege escalation by corrupting msg_msg structures and leveraging a ROP chain.
This is a working exploit for CVE-2022-0995, a Linux kernel vulnerability in the watch_queue subsystem. It leverages use-after-free to achieve local privilege escalation by manipulating msg_msg structures and pipe buffers.
This is a working privilege escalation exploit for CVE-2022-0995, leveraging a heap out-of-bounds write in the Linux kernel's watch_queue component to achieve arbitrary code execution in the kernel context. The exploit uses msg_msg spraying and ROP chains to bypass KASLR and gain root privileges.
The repository contains only a README.md file with minimal content, providing no functional exploit code or technical details for CVE-2022-0995.
This Metasploit module exploits CVE-2022-0995, a heap out-of-bounds write vulnerability in the Linux Kernel's watch_queue event notification system. It targets Ubuntu Linux 5.13.0-37 and attempts to achieve local privilege escalation by leveraging a heap spray technique.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H