Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-25265. PoCs published by x0reaxeax.
AI-analyzed exploit summary This PoC demonstrates a bypass of executable-space protection (NX) by exploiting the absence of the PT_GNU_STACK header in binaries compiled with older tools, allowing execution of code in non-executable memory regions. It copies opcodes from a dummy function into a buffer and executes them, proving RWX access.
Description
In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
Exploits (1)
This PoC demonstrates a bypass of executable-space protection (NX) by exploiting the absence of the PT_GNU_STACK header in binaries compiled with older tools, allowing execution of code in non-executable memory regions. It copies opcodes from a dummy function into a buffer and executes them, proving RWX access.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H