Sploitus

Exploit for Integer Overflow or Wraparound in Linux Linux Kernel

githubexploit Β· 2021-07-21

Exploit Code

README13 lines
## https://sploitus.com/exploit?id=5506CFC2-490F-5BF2-A79A-AD8F732A24B3
Kernel runtime fix of CVE-2021-33909
====================================

This repository builds an out-of-tree module named "cve-2021-33909.ko".
cve-2021-33909 fixes an issue in the kernels filesystem layer by kprobe-replacing vulnerable functions during runtime.

It can be build via "make", setting KDIR to the kernels (source-/header-)directory.

It can be loaded directly via "insmod cve-2021-33909.ko",
or copied (+depmod) into the kernels module directory (extra/) and then modprobed with "modprobe cve-2021-33909".

by Stephan Baerwolf, Erfurt 2021