CVE-2022-2602
MEDIUMLinux Kernel < 6.0.19 - Use-After-Free in io_uring Unix SCM Garbage Collection
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-2602. PoCs published by kiks7, LukeGix, th3-5had0w.
AI-analyzed exploit summary This exploit leverages a Use-After-Free (UAF) vulnerability in the io_uring subsystem (CVE-2022-2602) to achieve local privilege escalation by manipulating file descriptors and triggering a race condition to overwrite /etc/passwd.
Description
io_uring UAF, Unix SCM garbage collection
Exploits (3)
This exploit leverages a Use-After-Free (UAF) vulnerability in the io_uring subsystem (CVE-2022-2602) to achieve local privilege escalation by manipulating file descriptors and triggering a race condition to overwrite /etc/passwd.
This repository contains two proof-of-concept exploits for CVE-2022-2602, a Linux kernel vulnerability. The exploits leverage io_uring and either inode locking or userfaultfd techniques to achieve local privilege escalation by manipulating file descriptors and triggering use-after-free conditions.
The provided code is a minimal stub for CVE-2022-2602, demonstrating socket allocation but lacking exploit logic. It does not contain offensive techniques or exploit the vulnerability.
References (7)
Scores
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H