CVE-2022-42703
MEDIUMLinux Kernel < 5.19.7 - Use-After-Free in anon_vma Reuse
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2022-42703. PoCs published by Squirre17, Satheesh575555.
AI-analyzed exploit summary This is a working proof-of-concept exploit for CVE-2022-42703, demonstrating a local privilege escalation (LPE) attack via hardware breakpoints and kernel stack manipulation. The exploit leverages arbitrary address write primitives and hardware breakpoints to bypass KASLR and canary protections, ultimately achieving root privileges.
Description
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.
Exploits (2)
This is a working proof-of-concept exploit for CVE-2022-42703, demonstrating a local privilege escalation (LPE) attack via hardware breakpoints and kernel stack manipulation. The exploit leverages arbitrary address write primitives and hardware breakpoints to bypass KASLR and canary protections, ultimately achieving root privileges.
This repository contains a proof-of-concept exploit for CVE-2022-42703, targeting a vulnerability in the Linux kernel. The provided code includes a utility to interact with the taskstats interface, which could be used to demonstrate the vulnerability.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H