pivik271/cve-2021-3490Proof-of-concept exploit for CVE-2021-3490, leveraging eBPF ALU32 bounds tracking flaw in Linux kernel to achieve arbitrary code execution via out-of-bounds reads and writes.
The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution.
Compile: gcc -o pwn pwn.c && gcc -o exploit exploit.c
