CVE-2014-9322 PoC for Linux kernel

vendor:

Kernel

by:

Exploit-Database

7,8

CVSS

HIGH

BadIRET

119

CWE

Product Name: Kernel

Affected Version From: Unknown

Affected Version To: Unknown

Patch Exists: YES

Related CWE: CVE-2014-9322

CPE: N/A

Metasploit: https://www.rapid7.com/db/vulnerabilities/suse-cve-2014-9322/, https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2014-9322/, https://www.rapid7.com/db/vulnerabilities/f5-big-ip-cve-2014-9322/

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Linux

2014

CVE-2014-9322 PoC for Linux kernel

This PoC uses only syscalls not any libraries, like pthread. Threads are implemented using raw Linux syscalls.

Mitigation:

Apply the latest security patches and updates to the Linux kernel.

Source

Exploit-DB raw data:

# CVE-2014-9322 PoC for Linux kernel
CVE-2014-9322 (a.k.a BadIRET) proof of concept for Linux kernel.  
This PoC uses only syscalls not any libraries, like pthread. Threads are implemented using raw Linux syscalls.  
[Raw Linux Threads via System Calls](http://nullprogram.com/blog/2015/05/15/)  

# Usage
```
$ make
```
**badiret.elf** is an ELF executable.  
**badiret.bin** is a raw binary that can be used as payload.  

# Reference
[Exploiting “BadIRET” vulnerability (CVE-2014-9322, Linux kernel privilege escalation)](https://blogs.bromium.com/exploiting-badiret-vulnerability-cve-2014-9322-linux-kernel-privilege-escalation/)  

Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44205.zip