CVE-2022-1011
HIGHLinux Kernel < 5.17 - Use-After-Free in FUSE Filesystem via write()
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2022-1011. PoCs published by xkaneiki.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2022-1011, a vulnerability in the Linux kernel's FUSE (Filesystem in Userspace) implementation. The exploit leverages the asynchronous behavior of splice to retain references to memory pages in the filesystem process after the client's write operation has completed, potentially leading to information disclosure or other impacts.
Description
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2022-1011, a vulnerability in the Linux kernel's FUSE (Filesystem in Userspace) implementation. The exploit leverages the asynchronous behavior of splice to retain references to memory pages in the filesystem process after the client's write operation has completed, potentially leading to information disclosure or other impacts.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H