CVE-2022-2602 PoC — Linux kernel 安全漏洞

Source

https://github.com/kiks7/CVE-2022-2602-Kernel-Exploit

Associated Vulnerability

Title:Linux kernel 安全漏洞 (CVE-2022-2602)
Description:io_uring UAF, Unix SCM garbage collection

Readme

# CVE-2022-2602-Kernel-Exploit
## Details
https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-io_uring-uaf/


## TL;DR
The vulnerability is an Use-After-Free that impacts the registered file descriptor functionality in the io_uring subsystem. It's possible to register a file in the io_uring context, free it from the Unix Garbage Collector and re-use it with the requested io_uring operation (for example, a `writev` operation). To exploit the bug, it was a matter of replace the freed file structure with a read-only file (e.g. /etc/passwd), in order to write into it, and achieve a good timing with a small race window.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →