exploit_linux_kernel4.13

CVE-2017-14954 CVE-2017-18344 CVE-2017-5123

kitploit · 2026-08-25

Description

LPE in Linux Kernel 4.13 combining CVE-2017-5123, CVE-2017-18344, and CVE-2017-14954.

Entry point

Parameterpid · path

Path/proc/$PID/timers

Procfs timer information leakage for a specific process, enables arbitrary kernel memory read

Affected Linux Linux Kernel versions

Linux Linux Kernel≤ 4.13.4, 4.14.8, 4.13.7

All known vulnerabilities by product

Alt Linux Centos Linux Kernel Red Hat Suse Ubuntu Linux

CVSS Score

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-25 06:21

Last Seen:2026-08-26 02:10

Reporter:KitPloit

Tags

Linux KernelLocal Privilege EscalationKASLR bypasswaitidarbitrary readUbuntu

Other exploits for the same CVE

linux-kernel-exploits

2026-08-27 KitPloitKITPLOIT

exploiting-cve-2017-5123

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

kernel-exploits

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ECHO-DEVIM-EXPLOIT_LINUX_KERNEL4.13
이 저장소는 세 가지 CVE(CVE-2017-14954, CVE-2017-18344, CVE-2017-5123)를 결합한 오래된 PoC를 포함하고 있습니다. 이 PoC는 Linux 커널 4.13용 로컬 권한 상승(로컬 Privilege Escalation)이며 (Ubuntu에서 테스트됨).

익스플로잇은 정보 유출(CVE-2017-14954)을 사용하여 KASLR을 우회하고, 임의 읽기(CVE-2017-18344)를 사용하여 커널 메모리를 읽어 uid 1000(비특권 사용자)의 `struct cred`를 찾고, 버그가 있는 `waitid` 시스템 호출(CVE-2017-5123)을 사용하여 uid 값을 0(root)으로 덮어씁니다.

저는 세 익스플로잇의 원 저자가 아니며, 연습 삼아 결합했을 뿐입니다.