CVE-2022-25636
HIGHLinux Kernel 5.4-5.6.10 - Privilege Escalation via nf_dup_netdev Heap Out-of-Bounds Write
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2022-25636. PoCs published by Bonfee, veritas501, chenaotian.
AI-analyzed exploit summary This is a functional exploit for CVE-2022-25636, targeting a heap-based out-of-bounds write vulnerability in the Linux kernel's nf_tables subsystem. It uses a combination of heap spraying, memory corruption, and ROP to achieve local privilege escalation.
Description
net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.
Exploits (4)
This is a functional exploit for CVE-2022-25636, targeting a heap-based out-of-bounds write vulnerability in the Linux kernel's nf_tables subsystem. It uses a combination of heap spraying, memory corruption, and ROP to achieve local privilege escalation.
This is a functional exploit for CVE-2022-25636, leveraging a pipe-primitive technique to achieve local privilege escalation (LPE) by overwriting /usr/bin/mount with a SUID shell. It bypasses KASLR, SMAP, SMEP, and KPTI without requiring additional leaks or bypasses.
This repository contains a proof-of-concept exploit for CVE-2022-25636, a heap out-of-bounds write vulnerability in the Linux kernel's netfilter module. The exploit demonstrates local privilege escalation by leveraging the vulnerability to achieve arbitrary kernel memory writes, with a success rate of less than 50%.
This repository contains a functional exploit for CVE-2022-25636, a Netfilter heap overflow vulnerability in Linux kernels 5.4 to 5.16.10. The exploit leverages socket operations and memory manipulation to achieve local privilege escalation (LPE).
References (9)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H