CVE-2022-34918 PoC — Linux kernel 安全漏洞

Source

https://github.com/merlinepedra25/CVE-2022-34918-LPE-PoC

Associated Vulnerability

Title:Linux kernel 安全漏洞 (CVE-2022-34918)
Description:An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

Readme

# CVE-2022-34918 LPE PoC

LPE exploit for CVE-2022-34918.
This exploit has been written for the kernel `Linux ubuntu 5.15.0-39-generic`

You can find the associated write-up on our [blog](https://randorisec.fr/crack-linux-firewall/)

## Usage

`get_root` should be in the current folder

```
$ ls
get_root poc
$ ./poc
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →