CVE-2022-2078 PoC — Linux kernel 安全漏洞

Source

https://github.com/delsploit/CVE-2022-2078

Associated Vulnerability

Title:Linux kernel 安全漏洞 (CVE-2022-2078)
Description:A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

Readme

# CVE-2022-2078

```
$ ./poc
...
[+] get_set
leak_buffer:
  0000  30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f  0123456789:;<=>?
  0010  28 00 00 00 00 02 0a 8f 68 8b a2 be 40 ac 70 8c  (.......h...@.p.
  0020  ff ff ff ff 00 6c b5 81                          .....l..
[+] kernel=0xffffffff8c70ac40
```

File Snapshot


 [4.0K]  /data/pocs/8455ac284c89c4e8cbf11ee48cb74977d65b8a87
├── [  85]  boot.sh
├── [  89]  dbg_boot.sh
├── [ 15K]  helper.c
├── [ 569]  helper.h
├── [ 309]  Makefile
├── [2.0K]  poc.c
└── [ 306]  README.md

0 directories, 7 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!