search

jm33-m0 / go-lpe

A collection of weaponized LPE exploits written in Go
GNU General Public License v3.0
50 stars 9 forks source link

CVE-2021-4034: pkexec exploit causes calling process to exit when exploit fails #5

Closed jm33-m0 closed 1 year ago

jm33-m0 commented 1 year ago

https://github.com/jm33-m0/go-lpe/blob/2d593ea9766bda1a52e9ea1a744eb1b06ef848ac/CVE-2021-4034.go#L99-L104

As it executes execve syscall, current process will get replace by pkexec no matter it will successfully execute payload.so or not. Therefore when this exploit fails to call payload.so, calling process emp3r0r will die.

jm33-m0 commented 1 year ago

See https://github.com/jm33-m0/emp3r0r/issues/250