Background A few weeks ago, @kiks and I started to search for some recent CVEs in order to pratice our kernel exploitation skills. We chose CVE-2022-2602 as our target for two reasons: In the end, we were able to create a functional exploit using two different techniques: userfaultfd and inode locking. FUSE exploit coming soon, I’ll update this…
During the past few weeks, my friend @kiks and I started to develop an exploit for CVE-2022-2602: it’s an io_uring UAF. We already completed the exploit using the userfaultfd technique to pause a kernel thread. Unfortunately, this technique is dead (thank you, vm.unprivileged_userfaultfd :/ ), so we started searching a good replacement for userfaultfd. While reading @chompie’s blogpost about io_uring, I stumbled upon FUSE. In this…