add CVE-2022-25636 Linux 本地提权

ghostion · Mar 10, 2022 · 3ee4545 · 3ee4545
1 parent f921960
commit 3ee4545
Show file tree

Hide file tree

Showing 8 changed files with 813 additions and 0 deletions.
diff --git a/98-Linux提权/CVE-2022-25636-Linux 提权漏洞/Makefile b/98-Linux提权/CVE-2022-25636-Linux 提权漏洞/Makefile
@@ -0,0 +1,11 @@
+LDFLAGS = -no-pie -I/usr/include/fuse -lfuse -pthread -lmnl -lnftnl 
+CC = gcc
+
+all: exploit
+
+.PHONY: exploit
+exploit:
+	$(CC) exploit.c fakefuse.c util.c -o exploit $(CFLAGS) $(LDFLAGS)
+
+clean:
+	rm -f exploit
diff --git a/98-Linux提权/CVE-2022-25636-Linux 提权漏洞/README.md b/98-Linux提权/CVE-2022-25636-Linux 提权漏洞/README.md
@@ -0,0 +1,10 @@
+# CVE-2022-25636 Linux 本地提权
+This is my exploit for `CVE-2022-25636`.  
+I tested it against Ubuntu 21.10 with kernel `5.13.0-30`.  
+Works about `~40%` of the time, in the other cases you likely get a kernel panic.  
+The exploit might corrupt important data on heap, after an unsuccessful attempt it's best to reboot.  
+
+## USAGE
+编译完成后，直接运行即可
+
+![执行结果](poc.png)