kernelCTF: add CVE-2026-23273_cos#373
Conversation
|
It looks like vuln-verify is failing because there is no objcopy in the repro environment, we can see if it can be added. In the meantime can you take a look at why the repro on COS is failing? It looks like the exploit is hanging the kernel |
That's strange, objcopy is present in both v2 and v3 rootfs images.
I made some changes to improve reliability. |
artmetla
added
recheck
| *rop++ = 0x100; | ||
| *rop++ = kaddr(POP_RDI); | ||
| *rop++ = dst & (~0xfffff); | ||
| *rop++ = kaddr_offset(target.GetSymbolOffset("set_memory_rw")); |
There was a problem hiding this comment.
Have you checked if this symbol is present in kernelXDK DB?
If not, it should be added in the way like here: https://xdk.dev/libxdk/sample_exploit.html
| *rop++ = src; | ||
| *rop++ = len; | ||
| *rop++ = 0xdeadbeef; | ||
| *rop++ = kaddr_offset(target.GetSymbolOffset("memcpy")); |
artmetla
left a comment
artmetla
left a comment
There was a problem hiding this comment.
Please have one more look at kernelXDK usage and fix or comment on it.
3 participants
No description provided.