CVE-2024-0582
HIGH EXPLOITEDLinux Kernel 6.4-6.6.4 - Use-After-Free in io_uring Buffer Ring Registration
Title source: llmExploitation Summary
CVE-2024-0582 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 9 public exploits from researchers including ysanatomic, geniuszly, kuzeyardabulut.
AI-analyzed exploit summary This repository contains a functional local privilege escalation (LPE) exploit for CVE-2024-0582, leveraging an io_uring vulnerability in the Linux kernel. The exploit manipulates socket structures to achieve arbitrary kernel memory read/write, bypassing KASLR and ultimately escalating privileges.
Description
A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Exploits (9)
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2024-0582, leveraging an io_uring vulnerability in the Linux kernel. The exploit manipulates socket structures to achieve arbitrary kernel memory read/write, bypassing KASLR and ultimately escalating privileges.
This repository contains a functional exploit PoC for CVE-2024-0582, leveraging io_uring buffer manipulation to achieve privilege escalation via memory corruption and KASLR bypass. The code includes detailed setup for io_uring, socket manipulation, and memory dumping to locate and exploit kernel structures.
This repository contains a functional Proof-of-Concept (PoC) exploit for CVE-2024-0582, leveraging the Dirty Cred and Dirty Pagetable attack methods to achieve local privilege escalation (LPE) by exploiting a use-after-free vulnerability in the io_uring subsystem. The exploit includes both C and Rust implementations, with detailed instructions for adjusting kernel-specific offsets.
This repository contains a functional data-only exploit for CVE-2024-0582, leveraging a use-after-free vulnerability in io_uring to modify file permissions and append a backdoor user to /etc/passwd. The exploit sprays file structures and manipulates memory to achieve local privilege escalation.
This repository contains a functional exploit for CVE-2024-0582, a Use-After-Free vulnerability in the io_uring subsystem of the Linux kernel version 6.6.1. The exploit leverages message queue manipulation and pipe_buffer structures to achieve arbitrary read/write primitives, ultimately leading to privilege escalation.
This repository contains a functional exploit for CVE-2024-0582, leveraging a use-after-free (UAF) vulnerability in the Linux kernel's io_uring subsystem. The exploit manipulates file operations to achieve local privilege escalation (LPE) by modifying kernel structures.
This repository contains a functional exploit for CVE-2024-0582, leveraging io_uring buffer registration to achieve local privilege escalation (LPE) by manipulating page table entries (PTE) and overwriting kernel memory. The exploit is designed to run in a QEMU environment with specific kernel configurations.
This repository contains a functional proof-of-concept exploit for CVE-2024-0582, a page-level use-after-free vulnerability in the Linux kernel's `io_uring` subsystem. The exploit includes kernel configuration, build scripts for a QEMU environment, and a C-based exploit that demonstrates privilege escalation.
This repository contains a functional proof-of-concept exploit for CVE-2024-0582, leveraging io_uring buffer ring manipulation to leak kernel memory addresses. The exploit demonstrates a memory corruption vulnerability in the Linux kernel's io_uring subsystem.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H