io_uring DirtyCred file exploitation (CVE-2022-2602)

Aynı bug/CVE (CVE-2022-2602): bkz. canonical not io_uring DirtyCred UAF.

Mechanism

Bu not, io_uring registered file'ları ile Unix/AF_UNIX SCM garbage collector (unix_gc) arasındaki aynı use-after-free'i, DirtyCred file swap çerçevesinden anlatır. Tam mekanizma için canonical not'a bakın: io_uring DirtyCred UAF.

Walkthrough

Tam walkthrough canonical not'ta: io_uring DirtyCred UAF.

References

• oss-sec: CVE-2022-2602 — Linux kernel io_uring UAF
• CVE-2022-2602: DirtyCred File Exploitation applied on an io_uring UAF (Hacktive Security)
• NVD — CVE-2022-2602