cve/2022/CVE-2022-27666.md

CVE-2022-27666

Description

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.

POC

Reference

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.15

Github

• https://github.com/0xMarcio/cve
• https://github.com/20142995/sectool
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Albocoder/cve-2022-27666-exploits
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/Ch4nc3n/PublicExploitation
• https://github.com/GhostTroops/TOP
• https://github.com/HaxorSecInfec/autoroot.sh
• https://github.com/IdanBanani/Linux-Kernel-VR-Exploitation
• https://github.com/JERRY123S/all-poc
• https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits
• https://github.com/Metarget/metarget
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/SYRTI/POC_to_review
• https://github.com/WhooAmii/POC_to_review
• https://github.com/a-roshbaik/Linux-Privilege-Escalation-Exploits
• https://github.com/a8stract-lab/SeaK
• https://github.com/bsauce/kernel-exploit-factory
• https://github.com/bsauce/kernel-security-learning
• https://github.com/cyberanand1337x/bug-bounty-2022
• https://github.com/hktalent/TOP
• https://github.com/j4k0m/really-good-cybersec
• https://github.com/jbmihoub/all-poc
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/kdn111/linux-kernel-exploitation
• https://github.com/khanhdn111/linux-kernel-exploitation
• https://github.com/khanhdz-06/linux-kernel-exploitation
• https://github.com/khanhdz191/linux-kernel-exploitation
• https://github.com/khanhhdz/linux-kernel-exploitation
• https://github.com/khanhhdz06/linux-kernel-exploitation
• https://github.com/khanhnd123/linux-kernel-exploitation
• https://github.com/knd06/linux-kernel-exploitation
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/manas3c/CVE-POC
• https://github.com/ndk06/linux-kernel-exploitation
• https://github.com/ndk191/linux-kernel-exploitation
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/plummm/CVE-2022-27666
• https://github.com/ssr-111/linux-kernel-exploitation
• https://github.com/trhacknon/Pocingit
• https://github.com/weeka10/-hktalent-TOP
• https://github.com/whoforget/CVE-POC
• https://github.com/wkhnh06/linux-kernel-exploitation
• https://github.com/xairy/linux-kernel-exploitation
• https://github.com/xuetusummer/Penetration_Testing_POC
• https://github.com/youwizard/CVE-POC
• https://github.com/zecool/cve
• https://github.com/zzcentury/PublicExploitation