linux-kernel-exploits/2014/CVE-2014-3153

CVE-2014-3153

CVE-2014-3153

The exp is from @timwr

Vulnerability reference:

• CVE-2014-3153
• exp-db

Kernels

3.3.5 ,3.3.4 ,3.3.2 ,3.2.13 ,3.2.9 ,3.2.1 ,3.1.8 ,3.0.5 ,3.0.4 ,3.0.2 ,3.0.1 ,2.6.39 ,2.6.38 ,2.6.37 ,2.6.35 ,2.6.34 ,2.6.33 ,2.6.32 ,2.6.9 ,2.6.8 ,2.6.7 ,2.6.6 ,2.6.5 ,2.6.4 ,3.2.2 ,3.0.18 ,3.0 ,2.6.8.1

Usage

$ gcc exploit.c -o exploit -lpthread
$ ./exploit

References

• Exploiting the Futex Bug and uncovering Towelroot
• CVE-2014-3153内核漏洞分析
• cve2014-3153 漏洞之详细分析与利用
• Research of CVE-2014-3153 and its famous exploit towelroot on x86