khoatran107/cve-2025-39682Linux kernel TLS zero-length record handling exploit for CVE-2025-39682, targeting kernelCTF mitigation instances with a 79% success rate.
This is also my first (? idk, this is a variant of CVE-2024-58239) 1-day exploit.
Patch: tls: fix handling of zero-length records on the rx_list
This CVE was used in exp398 and and exp403. kernelCTF spreadsheet.
For folder structures and how to run the exploit, refer to my CVE-2024-58239 repo.
I modify my previous exploit "a little bit". And it works on the same mitigation-v4-6.6 instance, with a better success rate.
Success rate: 79/100.
Run on kernelCTF instance:
Detailed write-up coming later, for both CVEs.
