CVE-2023-6931

EIP tracks 1 public exploit for CVE-2023-6931. PoCs published by K0n9-log.

AI-analyzed exploit summary The repository contains a functional PoC for CVE-2023-6931, demonstrating a heap buffer overflow in the Linux kernel's `perf_event` subsystem due to an integer overflow in `read_size` when handling group events. The exploit creates a large number of sibling events to trigger the overflow, leading to a kernel panic.

A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group(). We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.