CVE-2017-16995 Writeup

The folder containes a line-by-line source code analysis for CVE-2017-16995 (Linux BPF local privilege escalation). Exploit and patch tested on kernel 4.4.0.116.

Credits

• Special thanks to difeng_tang who has also contributed this writeup.
• Exploit scripts was created by @iBearcat at https://github.com/iBearcat/CVE-2017-16995/blob/master/exploit.c.