Exploitation Summary
EIP tracks 7 public exploits for CVE-2022-2639. PoCs published by bb33bb, hhhell, devetop.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2022-2639, a Linux kernel openvswitch local privilege escalation vulnerability. The exploit leverages the pipe-primitive technique to bypass modern kernel protections like KASLR, SMAP, and SMEP, achieving root privileges by overwriting /usr/bin/mount with a SUID shell.
Description
An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Exploits (7)
This repository contains a functional exploit for CVE-2022-2639, a Linux kernel openvswitch local privilege escalation vulnerability. The exploit leverages the pipe-primitive technique to bypass modern kernel protections like KASLR, SMAP, and SMEP, achieving root privileges by overwriting /usr/bin/mount with a SUID shell.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2022-2639, a Linux kernel integer conversion vulnerability in the Open vSwitch (OVS) module's `reserve_sfa_size()` function. The exploit leverages heap manipulation and pipe_buffer/sk_buff techniques to achieve arbitrary write and execute shellcode for root access.
This is a functional local privilege escalation (LPE) exploit for CVE-2022-2639, targeting a heap out-of-bounds write vulnerability in the Linux kernel's openvswitch module. It leverages the pipe-primitive technique to bypass modern mitigations like KASLR, SMAP, and SMEP, achieving root by overwriting /usr/bin/mount with a SUID shell.
This repository contains a shell script to detect and mitigate CVE-2022-2639 by checking if the Open vSwitch kernel module is blacklisted and optionally applying the mitigation. It does not exploit the vulnerability but provides a remediation script.
This repository contains a functional exploit for CVE-2022-2639, a Linux kernel openvswitch local privilege escalation vulnerability. The exploit leverages a pipe primitive to bypass KASLR and other protections, demonstrating a reliable LPE attack.
This repository contains a functional exploit for CVE-2022-2639, a Linux kernel openvswitch local privilege escalation vulnerability. The exploit leverages a pipe primitive to bypass KASLR and other protections, demonstrating a reliable LPE attack.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H