Local LPE, Linux kernel 3.x - 5.x, CVE-2019-15666

[tabac]

A poc for the kernel vulnerability (CVE-2019-15666 Ubuntu / CentOS / RHEL) that was reported last year. CentOS was the last distribution to patch the bug in January 2020.

CVE-2019-15666:

CVE-2019-15666 Ubuntu / CentOS / RHEL Linux Kernel 4.4 - 4.18 privilege escalation - Vitaly Nikolenko

Ubuntu 18.04 16.04 14.04 / CentOS 8 / RHEL 8 kernel local privilege escalation

duasynt.com

Техническая документация:

https://duasynt.com/pub/vnik/01-0311-2018.pdf

POC:

GitHub - duasynt/xfrm_poc: Linux kernel XFRM UAF poc (3.x - 5.x kernels)

Linux kernel XFRM UAF poc (3.x - 5.x kernels). Contribute to duasynt/xfrm_poc development by creating an account on GitHub.

github.com