Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2016-4557

Description

The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service (use-after-free) via crafted BPF instructions that reference an incorrect file descriptor.

POC

Reference

- https://www.exploit-db.com/exploits/40759/

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/HaxorSecInfec/autoroot.sh

- https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits

- https://github.com/Mr-Tree-S/POC_EXP

- https://github.com/a-roshbaik/Linux-Privilege-Escalation-Exploits

- https://github.com/chadjoan/cdj-kernel-config

- https://github.com/chreniuc/CTF

- https://github.com/christian-byrne/custom-nodes-security-scan

- https://github.com/christian-byrne/node-sec-scan

- https://github.com/dylandreimerink/gobpfld

- https://github.com/kkamagui/linux-kernel-exploits

- https://github.com/meobeongok/kernels

- https://github.com/mudongliang/LinuxFlaw

- https://github.com/oneoy/cve-

- https://github.com/ostrichxyz7/kexps

- https://github.com/s0nk3y/php-kernel-exploit

- https://github.com/vlain1337/auto-lpe