CVE-2023-5178
HIGHLinux Kernel 5.0-5.4.260 - Use-After-Free in NVMe/TCP Subsystem
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-5178. PoCs published by rockrid3r.
AI-analyzed exploit summary This repository contains a working exploit for CVE-2023-5178, a logic error in the NVMe-oF-TCP driver leading to a racy double-free in kmalloc-96, which can be exploited for local privilege escalation (LPE). The exploit targets Ubuntu 23.10 with kernel 6.5.0-9-generic and includes a PoC to trigger the bug and a full exploit to achieve LPE.
Description
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.
Exploits (1)
This repository contains a working exploit for CVE-2023-5178, a logic error in the NVMe-oF-TCP driver leading to a racy double-free in kmalloc-96, which can be exploited for local privilege escalation (LPE). The exploit targets Ubuntu 23.10 with kernel 6.5.0-9-generic and includes a PoC to trigger the bug and a full exploit to achieve LPE.
References (26)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H