Published: 16/01/2024 Updated: 01/05/2024

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 0

A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 6.7
linux linux kernel

DescriptionA memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it This flaw allows a local user to crash or potentially escalate their privileges on the systemA memory leak flaw was found in the Linux kernel’s io_uring ...

oss-sec mailing list archives   By Date By Thread </form>    CVE-2024-0582 - Linux kernel use-after-free vulnerability in io_uring, writeup and exploit strategy <!--X-Subject-Header-End-- ...

CVE-2024-0582: Serious Linux Kernel Bug Opens Door to System Takeovers, PoC Published Bypass latest Kernel User to root --->Usage python3 CVE-2024-0582py 通过利用错误配置的 setuid/setgid 二进制文件、功能和 sudo 权限，在 unix 系统上自动提升权限。专为 CTF 设计，但也适用于现实世界的渗透测试。✅ 功能自动利用配置

LPE exploit for CVE-2024-0582 (io_uring)

io_uring_LPE-CVE-2024-0582 LPE exploit for CVE-2024-0582 I will not be releasing a write-up for this vulnerability as my method of exploitation is almost the same as for CVE-2023-2598 You can read the exploitation section of my write-up on CVE-2023-2598 to understand this exploit as well: Conquering the memory through io_uring - Analysis of CVE-2023-2598 If you want to read

CVE-CVE-2024-0582 latest kernel bypass root updated POC just run python file with root ____________________________________________________________________________________________________________________________________________________________________________________________________ ✅ Features 通过利用错误配置的 setuid/setgid 二进制文件、功能和 sudo 权限�

CWE-416 https://access.redhat.com/security/cve/CVE-2024-0582 https://bugs.chromium.org/p/project-zero/issues/detail?id=2504 https://bugzilla.redhat.com/show_bug.cgi?id=2254050 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c392cbecd8eca4c53f2bf508731257d9d0a21c2d http://www.openwall.com/lists/oss-security/2024/04/24/3 https://nvd.nist.gov https://github.com/FoxyProxys/CVE-2024-0582 https://github.com/ysanatomic/io_uring_LPE-CVE-2024-0582 https://seclists.org/oss-sec/2024/q2/172 https://access.redhat.com/security/cve/cve-2024-0582

CVE-2024-0582

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect