
Proof-of-concept exploit for CVE-2022-1972, a kernel information leak in the Netfilter subsystem. Demonstrates unprivileged user namespace exploitation to leak kernel memory.
Infoleak exploit for the CVE-2022-1972.
You can find the associated write-up on our blog
The user namespaces must be available for unprivileged users.
$ sysctl kernel.unprivileged_userns_clone
kernel.unprivileged_userns_clone = 1
make