Exploitation Summary
EIP tracks 4 public exploits for CVE-2022-46395. PoCs published by SmileTabLabo, Gao-Zuin, Pro-me3us.
AI-analyzed exploit summary This is a working exploit for CVE-2022-46395, a vulnerability in the Arm Mali kernel driver. The exploit achieves arbitrary kernel code execution from an untrusted app domain, disables SELinux, and gains root privileges on affected devices.
Description
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r0p0 through r32p0, Bifrost r0p0 through r41p0 before r42p0, Valhall r19p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.
Exploits (4)
This is a working exploit for CVE-2022-46395, a vulnerability in the Arm Mali kernel driver. The exploit achieves arbitrary kernel code execution from an untrusted app domain, disables SELinux, and gains root privileges on affected devices.
This repository contains a functional exploit for CVE-2022-46395, targeting a vulnerability in QEMU's Mali GPU driver. The exploit leverages memory corruption to achieve privilege escalation by overwriting kernel memory, specifically targeting the `commit_creds` and `init_cred` functions to gain root access.
This is a functional exploit for CVE-2022-46395, targeting the ARM Mali GPU kernel driver on Amazon FireTV 2nd gen Cube devices. It leverages a memory corruption vulnerability to achieve arbitrary kernel code execution, disable SELinux, and escalate privileges to root.
This is a working exploit PoC for CVE-2022-46395, targeting the ARM Mali kernel driver on Amazon FireTV 3rd gen Cube. It leverages a vulnerability to achieve arbitrary kernel code execution, disable SELinux, and gain root privileges.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H