vendor:
Linux Kernel
by:
Robert Swiecki, Przemyslaw Frasunek, and Pawel Pisarczyk
7,2
CVSS
HIGH
Privilege Escalation
269
CWE
Product Name: Linux Kernel
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: x86_64 Linux
2005
Linux Kernel IA32 Syscall Emulation Exploit
This exploit is used to gain root privileges on x86_64 Linux kernel systems. It was rediscovered by Ben Hawkes with help from Robert Swiecki and Tavis Ormandy. The original vulnerability was discovered by Wojciech Purczynski and the original exploit was created by Robert Swiecki, Przemyslaw Frasunek, and Pawel Pisarczyk. The kernel privilege escalation code was borrowed from Spender. The exploit works by replacing the ia32_syscall entry in the sys_call_table with a call to the kernelmodecode function. This function calls the commit_creds and prepare_kernel_cred functions to gain root privileges.
Mitigation:
The best way to mitigate this vulnerability is to ensure that all systems are running the latest version of the Linux kernel.
