CVE-2022-34918
HIGH EXPLOITEDNetfilter nft_set_elem_init Heap Overflow Privilege Escalation
Title source: metasploitExploitation Summary
CVE-2022-34918 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 6 public exploits from researchers including randorisec, veritas501, merlinepedra, including a Metasploit module exploits/linux/local/netfilter_nft_set_elem_init_privesc.
AI-analyzed exploit summary This repository contains a functional local privilege escalation (LPE) exploit for CVE-2022-34918, targeting the Linux kernel (specifically Ubuntu 5.15.0-39-generic). The exploit leverages heap spraying and keyring manipulation to achieve privilege escalation, with detailed implementation in C.
Description
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
Exploits (6)
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2022-34918, targeting the Linux kernel (specifically Ubuntu 5.15.0-39-generic). The exploit leverages heap spraying and keyring manipulation to achieve privilege escalation, with detailed implementation in C.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2022-34918, targeting a vulnerability in the Linux kernel's netfilter subsystem. The exploit leverages the USMA technique to achieve privilege escalation and namespace escape, with detailed shellcode generation and kernel memory manipulation.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2022-34918, targeting Linux kernel 5.15.0-39-generic. The exploit leverages heap spraying and netfilter set manipulation to achieve arbitrary write primitives and escalate privileges.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2022-34918, targeting Linux kernel 5.15.0-39-generic. The exploit leverages heap spraying and netfilter set manipulation to achieve arbitrary write primitives and escalate privileges.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2022-34918, targeting Linux kernel 5.15.0-39-generic. The exploit leverages heap spraying and netfilter set manipulation to achieve arbitrary write primitives and ultimately gain root access.
This Metasploit module exploits a type confusion bug in the Linux kernel's nft_set_elem_init function (CVE-2022-34918) to achieve local privilege escalation. It leverages a heap overflow to escalate privileges from an unprivileged user namespace with CAP_NET_ADMIN access to root.
References (10)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H