CVE-2022-23222
HIGHLinux Kernel 5.8.0-5.15.14 - Local Privilege Escalation via BPF Verifier Pointer Arithmetic
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2022-23222. PoCs published by tr3ee, PenteraIO, FridayOrtiz.
AI-analyzed exploit summary This is a functional local privilege escalation (LPE) exploit for CVE-2022-23222, leveraging a vulnerability in the Linux kernel's eBPF verifier to achieve arbitrary read/write primitives and ultimately escalate privileges to root.
Description
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.
Exploits (4)
This is a functional local privilege escalation (LPE) exploit for CVE-2022-23222, leveraging a vulnerability in the Linux kernel's eBPF verifier to achieve arbitrary read/write primitives and ultimately escalate privileges to root.
This is a functional proof-of-concept exploit for CVE-2022-23222, a local privilege escalation vulnerability in the Linux kernel's eBPF subsystem. The exploit manipulates eBPF maps to achieve arbitrary memory read/write and escalate privileges to root.
This repository contains a working proof-of-concept exploit for CVE-2022-23222, a Linux kernel eBPF verifier vulnerability. The exploit leverages a pointer type mismatch to perform out-of-bounds memory access, leading to a local privilege escalation (LPE).
The repository contains only a README.md file referencing a report and a Vagrantfile for a PoC, but no actual exploit code or technical details are provided.
References (12)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H