Exploit for Race Condition in Linux Linux Kernel

CVE-2017-1000405

gitee · 2017-12-04

Description

PoC for CVE 2017 1000405 Huge Dirty Cow in Linux kernel causes use-after-free via huge pages.

Entry point

Parameter/proc/self/mem · path

Path/proc/self/mem

Kernel memory access via /proc/self/mem used to overwrite huge zero page through THP and pmd dirtiness (CVE-2017-1000405).

Affected Linux Linux Kernel versions

Linux Linux Kernel< 3.3, 3.11, 3.13, 3.16.52, 3.18.86, 4.1.48, 4.4.104, 4.9.67, 4.14.4

All known vulnerabilities by product

Alt Linux Linux Kernel Suse Ubuntu

CVSS 7.0 for CVE-2017-1000405

7.0

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:HIGH

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

75%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

2.8%higher than 84.8% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2017-12-04 22:30

Last Seen:2025-09-11 21:02

Reporter:feiser

Tags

linux kernelhuge dirty cowCVE-2017-1000405transparent huge pagesuse after free

Other exploits for CVE-2017-1000405

Exploit for Out-of-bounds Write in Linux Linux_Kernel

2025-09-13 mirrors_ljvblfzGITEE

Exploit for Race Condition in Linux Linux_Kernel

2021-05-30 chaojianhuGITEE

Linux Kernel - 'The Huge Dirty Cow' Overwriting The Huge Zero Page (2)

2017-12-11 anonymousEXPLOITDBC

Linux Kernel - The Huge Dirty Cow Overwriting The Huge Zero Page Exploit

2017-12-01 BindecyZDTC

Linux Kernel - The Huge Dirty Cow Overwriting The Huge Zero Page (1)

2017-11-30 BindecyEXPLOITPACKC

Linux Kernel - 'The Huge Dirty Cow' Overwriting The Huge Zero Page (1)

2017-11-30 BindecyEXPLOITDBC

"Huge Dirty COW" (CVE-2017–1000405)

2017-11-30 RootSEEBUGC

Exploit for Race Condition in Linux Linux_Kernel

2017-11-29 bindecyGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=39F3CEB8-215A-5B23-A11C-01FC1BB3828F
This is a PoC exploit for CVE-2017-1000405, also known as the Huge Dirty Cow vulnerability. The target product/service is the Linux kernel, and the vulnerability class/vector is a use-after-free bug in the handling of transparent huge pages. The probable entry point is the main.c file, which contains the exploit code. Notable dependencies/tooling include the pthread library for threading and the sys/mman.h library for memory management. The execution context is a Linux system with the transparent huge pages enabled. The run method is not specified. Preconditions for the exploit to work include a vulnerable version of the Linux kernel and the transparent huge pages enabled. The expected impact of the exploit is a use-after-free bug, which can lead to a system crash or other security issues.