writeups.xyz / SETTLERS OF NETLINK: Exploiting a limited UAF in nf_tables (CVE-2022-32250)

Submitter : c2a

Date: 1 September 2022

Bounty : undisclosed

Vulnerabilities :

• Memory Corruption
• Local Privilege Escalation

Programs :

• Ubuntu
• Linux Kernel Organization

Authors :

• Cedric Halbronn (@Saidelike)
• Alex Plaskett (@Alexjplaskett)
• Fidgeting Bits (@FidgetingBits)

Link :
https://research.nccgroup.com/2022/09/01/settlers-of-netlink-exploiting-a-limited-uaf-in-nf_tables-cve-2022-32250/