CVE-2014-9322 PoC — Linux kernel 本地提权漏洞

Source

https://github.com/RKX1209/CVE-2014-9322

Associated Vulnerability

Title:Linux kernel 本地提权漏洞 (CVE-2014-9322)
Description:arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

Description

CVE-2014-9322 (a.k.a BadIRET) proof of concept for Linux

Readme

# CVE-2014-9322 PoC for Linux kernel
CVE-2014-9322 (a.k.a BadIRET) proof of concept for Linux kernel.  
This PoC uses only syscalls not any libraries, like pthread. Threads are implemented using raw Linux syscalls.  
[Raw Linux Threads via System Calls](http://nullprogram.com/blog/2015/05/15/)  

# Usage
```
$ make
```
**badiret.elf** is an ELF executable.  
**badiret.bin** is a raw binary that can be used as payload.  

# Reference
[Exploiting “BadIRET” vulnerability (CVE-2014-9322, Linux kernel privilege escalation)](https://blogs.bromium.com/exploiting-badiret-vulnerability-cve-2014-9322-linux-kernel-privilege-escalation/)

File Snapshot


 [4.0K]  /data/pocs/09144409139bd231ebdb67efc213567ca7f7a302
├── [  64]  crt0.S
├── [ 736]  defines.h
├── [1.7K]  exploit.c
├── [ 379]  linker.ld
├── [ 781]  Makefile
├── [ 640]  README.md
├── [ 637]  syscall.S
└── [ 717]  thread.S

0 directories, 8 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!