fuchen-03

Results 3 issues of fuchen-03

Modified Exploit in CVE-2023-6817 to implement stack pivoting

The original exp can not successfully pivot stack like [Modified Exploit in CVE-2023-6817 to implement stack pivoting #183](https://github.com/google/security-research/pull/183). So I modified this exp using my linux-v6.1.63 gadget

Incorrect Exploit in KernelCTF(CVE-2023-6817) && About stack pivoting

### Question The layout in orignal ROP chain of CVE-2023-6817 exploit is below: ![Image](https://github.com/fuchen-03/my_pwn_wp/blob/main/cve-2023-6817/pic/origin_fault.jpg) But the kernel stack layout is not what was envisioned in exploit: ![Image](https://github.com/fuchen-03/my_pwn_wp/blob/main/cve-2023-6817/pic/difficult.png) The red box...

Some Question about nftables in CVE-2024-0193

1 comment

The vulnerability is deacvtivate catchall elem many time. But it constructs new_pipapo_set , new_set_elem_with_expiration , del_set to trig the vul. It will deactivate elem first in nft_delset func and when...