CVE-2022-1015
MEDIUMLinux Kernel < 5.16.18 - Out-of-bounds Write in netfilter nf_tables_api
Title source: llmExploitation Summary
EIP tracks 10 public exploits for CVE-2022-1015. PoCs published by pqlx, ysanatomic, more-kohii.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2022-1015, a local privilege escalation vulnerability in the `nf_tables` component of the Linux kernel. The exploit targets kernels between versions 5.12 and 5.17, leveraging a bug in the netfilter subsystem to achieve privilege escalation.
Description
A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.
Exploits (10)
This repository contains a proof-of-concept exploit for CVE-2022-1015, a local privilege escalation vulnerability in the `nf_tables` component of the Linux kernel. The exploit targets kernels between versions 5.12 and 5.17, leveraging a bug in the netfilter subsystem to achieve privilege escalation.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2022-1015, targeting an out-of-bounds (OOB) read/write vulnerability in the Linux Kernel's nf_tables. The exploit bypasses KASLR and escalates privileges to root by manipulating netfilter rules and triggering a stack-based ROP chain.
This PoC exploits CVE-2022-1015, a stack-based out-of-bounds read/write vulnerability in the Linux kernel's nftables subsystem. It demonstrates privilege escalation via a crafted ROP chain to bypass kernel security mechanisms.
This is a functional privilege escalation exploit for CVE-2022-1015, leveraging a netfilter heap out-of-bounds write to achieve arbitrary kernel memory manipulation. It uses a two-stage approach: first leaking the kernel base address via UDP packet manipulation, then executing a ROP chain to escalate privileges and spawn a root shell.
This is a functional exploit for CVE-2022-1015, targeting a Linux kernel nftables out-of-bounds access vulnerability. It achieves local privilege escalation by manipulating nftables rules and leveraging kernel memory corruption.
This PoC demonstrates CVE-2022-1015, a Linux kernel vulnerability in the nftables subsystem, by creating a custom rootfs environment and executing a test binary within a QEMU VM. The test.c file sets up CPU affinity and user/network namespaces before spawning a shell.
This is a local privilege escalation (LPE) PoC for CVE-2022-1015, exploiting a vulnerability in the Linux kernel's netfilter subsystem. The code demonstrates the creation of malicious nftables rules to trigger the vulnerability.
This repository contains a functional proof-of-concept exploit for CVE-2022-1015, a Linux kernel vulnerability in the nf_tables subsystem. The exploit achieves local privilege escalation by manipulating netfilter rules to leak kernel addresses and overwrite kernel memory, ultimately spawning a root shell.
This PoC exploits CVE-2022-1015, a vulnerability in the Linux kernel's nf_tables subsystem, to leak kernel memory. The code uses libmnl and libnftnl to manipulate netfilter tables and chains, demonstrating the vulnerability through crafted nf_tables rules.
This is a Spanish translation of a blog post discussing CVE-2022-1015 and CVE-2022-1016, two Linux kernel vulnerabilities in the nf_tables module. It provides background, analysis, and context but does not contain exploit code.
References (7)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H