Kernel Exploits

Linux Kernel Version

uname -a

Linux NIX02 4.4.0-116-generic #140-Ubuntu SMP Mon Feb 12 21:23:04 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

Linux Kernel 4.4.0-116

$ uname -r

5.10.5-051005-generic
$ cat /etc/lsb-release 

DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.4 LTS"

Kernel exploits can cause system instability so use caution when running these against a production system.

Google "Linux Kernel XXX exploit" and/or "OS XXX exploit"

Linux Exploit Suggester

Logolinux-exploit-suggester/linux-exploit-suggester.sh at master · The-Z-Labs/linux-exploit-suggesterGitHub

Metasploit - Local Exploit Suggester

LogoMulti Recon Local Exploit Suggester - Metasploit - InfosecMatterInfosecMatter

Universal local privilege escalation - CVE-2024-1086 - Linux kernels between v5.14 and v6.6

including Debian, Ubuntu, and KernelCTF

See Releases:

LogoGitHub - Notselwyn/CVE-2024-1086: Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.GitHub

DirtyCow - Linux Kernel 2.6.22 < 3.9

LogoPoCsGitHub
LogoLinux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)Exploit Database

Linux Kernel 4.4.0-116

LogoLinux Kernel 4.4.0-116 (Ubuntu 16.04.4) - Local Privilege Escalati... - exploit database | Vulners.comVulners Database

Ubuntu 21.10 with kernel 5.13.0-37 -

LogoGitHub - Bonfee/CVE-2022-0995: CVE-2022-0995 exploitGitHub

Ubuntu - CVE-2021-3493 OverlayFS

  • Ubuntu 20.10

  • Ubuntu 20.04 LTS

  • Ubuntu 19.04

  • Ubuntu 18.04 LTS

  • Ubuntu 16.04 LTS

  • Ubuntu 14.04 ESM

LogoGitHub - briskets/CVE-2021-3493: Ubuntu OverlayFS Local PrivescGitHub

CVE-2022-23222 - Linux Kernel eBPF Local Privilege Escalation

Linux kernel through 5.15.14

LogoGitHub - tr3ee/CVE-2022-23222: CVE-2022-23222: Linux Kernel eBPF Local Privilege EscalationGitHub

CVE-2022-0995

The exploit targets Ubuntu 21.10 with kernel 5.13.0-37

LogoGitHub - Bonfee/CVE-2022-0995: CVE-2022-0995 exploitGitHub

Ubuntu - CVE-2023-32629 & CVE-2023-2640

LogoGitHub - ThrynSec/CVE-2023-32629-CVE-2023-2640---POC-Escalation: Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640GitHub

GameOver(lay) Ubuntu PrivEsc - CVE-2023-2640-CVE-2023-32629

Kernel version
Ubuntu release

6.2.0

Ubuntu 23.04 (Lunar Lobster) / Ubuntu 22.04 LTS (Jammy Jellyfish)

5.19.0

Ubuntu 22.10 (Kinetic Kudu) / Ubuntu 22.04 LTS (Jammy Jellyfish)

5.4.0

Ubuntu 22.04 LTS (Local Fossa) / Ubuntu 18.04 LTS (Bionic Beaver)

LogoGitHub - g1vi/CVE-2023-2640-CVE-2023-32629: GameOver(lay) Ubuntu Privilege EscalationGitHub

CVE-2023-35001

Kernel 5.19.0-35

LogoGitHub - synacktiv/CVE-2023-35001: Pwn2Own Vancouver 2023 Ubuntu LPE exploitGitHub
LogoHTB: Hospital0xdf hacks stuff

CVE-2023-0386 - OverlayFS vulnerability

kernel version lower than 6.2. Ubuntu 22.04

LogoGitHub - xkaneiki/CVE-2023-0386: CVE-2023-0386在ubuntu22.04上的提权GitHub
LogoThe OverlayFS vulnerability CVE-2023-0386: Overview, detection, and remediationdatadoghq
LogoHTB: TwoMillion0xdf hacks stuff

Ubuntu 22.04

LogoGitHub - sxlmnwb/CVE-2023-0386: Vulnerabilities Exploitation On Ubuntu 22.04GitHub

CVE-2023-32233

Linux kernel through 6.3 - Tested on Ubuntu 23.04 (Lunar Lobster).

LogoGitHub - Liuk3r/CVE-2023-32233: CVE-2023-32233: Linux内核中的安全漏洞GitHub

CVE-2023-4911 - Looney Tunables

Fedora 37 and 38, Ubuntu 22.04 and 23.04, and Debian 12 and 13

LogoGitHub - leesh3288/CVE-2023-4911: PoC for CVE-2023-4911GitHub
LogoCVE-2023-4911: Local Privilege Escalation in glibc’s ld.so | QualysQualys

Ubuntu 24.04

LogoAbusing Ubuntu 24.04 features for root privilege escalation | Snyk LabsSnyk Labs

Dirty Pipe - 5.8 to 5.17

All kernels from version 5.8 to 5.17

LogoGitHub - AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits: A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.GitHub

Exploit 1

Exploit 2

Netfilter

CVE-2021-22555 - 2.6 - 5.11

Vulnerable kernel versions: 2.6 - 5.11

Logosecurity-research/pocs/linux/cve-2021-22555 at master · google/security-researchGitHub

CVE-2022-25636 - 4.5 - 5.6.10

Linux kernel 5.4 through 5.6.10

LogoGitHub - Bonfee/CVE-2022-25636: CVE-2022-25636GitHub

CVE-2022-1015 - 5.12 - 5.17

Kernels after commit 345023b0db31 (v5.12) but before commit 6e1acfa387b9 (v5.17) are vulnerable.

LogoGitHub - pqlx/CVE-2022-1015: Local privilege escalation PoC for Linux kernel CVE-2022-1015GitHub

CVE-2023-32233 - Up to 6.3.1

Linux Kernel up to version 6.3.1

LogoGitHub - Liuk3r/CVE-2023-32233: CVE-2023-32233: Linux内核中的安全漏洞GitHub
PreviousMiscellaneous TechniquesNextShared Libraries

Last updated