Exploit for Incorrect Conversion between Numeric Types in Linux Linux Kernel

CVE-2020-27194 CVE-2020-8835

gitee · 2021-11-21

Description

Exploit for the Linux kernel incorrect numeric type conversion CVE-2020-27194.

Affected Linux Linux Kernel versions

Linux Linux Kernel< 5.8.15, 5.4.29, 5.5.14, 5.6.1

All known vulnerabilities by product

Alt Linux Linux Kernel Ubuntu

CVSS Score

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:HIGH

Privileges Required:LOW

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

98%confidence this exploit runs

Based on 5 file(s) in the source

EPSS Score

6.0%higher than 92.5% of all CVEs

Updated 2026-07-13

Exploit Details

Modified:2021-11-21 13:53

Last Seen:2025-09-11 08:20

Reporter:蒲公英之流

Tags

linux kernelnumeric type conversionCVE-2020-27194exploit

Other exploits for the same CVE

2026-08-27 KitPloitKITPLOIT

Exploitation-CVE-2020-8835

2026-08-27 KitPloitKITPLOIT

CVE-2020-27194-exp

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

INF8602-CVE-2020-8835

2026-08-26 KitPloitKITPLOIT

Rick_write_exp_CVE-2020-8835

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

CVE-2020-8835-verification

2026-08-26 KitPloitKITPLOIT

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=A5D61EC3-AD80-5FCB-A128-3036620DE6AC
# CVE-2020-27194
my exp for CVE-2020-27194, tested on linux kernel 5.8.14.

More details : https://ama2in9.top/2020/12/14/CVE-2020-27194/
# reference

[CVE-2020-8835 pwn2own 2020 ebpf 提权漏洞分析](https://www.anquanke.com/post/id/203416) 

[CVE-2020-8835 pwn2own 2020 ebpf 通过任意读写提权分析](https://xz.aliyun.com/t/7690)