linux-kernel-exploits/2017/CVE-2017-6074/README.md

CVE-2017-6074

• CVE-2017-6074

This is a proof-of-concept local root exploit for the vulnerability in the DCCP protocol implementation CVE-2017-6074. Includes a semireliable SMEP/SMAP bypass (the kernel might crash shorty after the exploit succeds).

Some details: http://www.openwall.com/lists/oss-security/2017/02/26/2

Timeline:

• 2017-02-15: Bug reported to security@kernel org
• 2017-02-16: Patch submitted to netdev
• 2017-02-17: Patch committed to mainline kernel
• 2017-02-18: Notification sent to linux-distros
• 2017-02-22: Public announcement
• 2017-02-26: Exploit published