An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
No PoCs from references.
- https://github.com/0day404/vulnerability-poc
- https://github.com/20142995/sectool
- https://github.com/ARPSyndicate/cvemon
- https://github.com/EkamSinghWalia/Detection-and-Mitigation-for-CVE-2022-2639
- https://github.com/HaxorSecInfec/autoroot.sh
- https://github.com/J1ezds/Vulnerability-Wiki-page
- https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits
- https://github.com/KayCHENvip/vulnerability-poc
- https://github.com/Miraitowa70/POC-Notes
- https://github.com/Mr-xn/Penetration_Testing_POC
- https://github.com/NaInSec/CVE-PoC-in-GitHub
- https://github.com/SYRTI/POC_to_review
- https://github.com/Snoopy-Sec/Localroot-ALL-CVE
- https://github.com/Threekiii/Awesome-POC
- https://github.com/WhooAmii/POC_to_review
- https://github.com/XiaomingX/awesome-poc-for-red-team
- https://github.com/XinLiu2025/openkylinsat
- https://github.com/a-roshbaik/Linux-Privilege-Escalation-Exploits
- https://github.com/avboy1337/CVE-2022-2639-PipeVersion
- https://github.com/bb33bb/CVE-2022-2639-PipeVersion
- https://github.com/bsauce/kernel-exploit-factory
- https://github.com/bsauce/kernel-security-learning
- https://github.com/bygregonline/devsec-fastapi-report
- https://github.com/d4n-sec/d4n-sec.github.io
- https://github.com/devetop/CVE-2022-2639-PipeVersion
- https://github.com/hardenedvault/vault_range_poc
- https://github.com/k0mi-tg/CVE-POC
- https://github.com/letsr00t/-2022-LOCALROOT-CVE-2022-2639
- https://github.com/lions2012/Penetration_Testing_POC
- https://github.com/manas3c/CVE-POC
- https://github.com/nisadevi11/Localroot-ALL-CVE
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/trhacknon/Pocingit
- https://github.com/vlain1337/auto-lpe
- https://github.com/whoforget/CVE-POC
- https://github.com/xuetusummer/Penetration_Testing_POC
- https://github.com/youwizard/CVE-POC
- https://github.com/zecool/cve