Skip to content

Commit

Permalink
fix: typos in exploit.md
Browse files Browse the repository at this point in the history
  • Loading branch information
V4bel-theori committed Dec 17, 2024
1 parent c5d5365 commit aa7cc3d
Showing 1 changed file with 2 additions and 4 deletions.
6 changes: 2 additions & 4 deletions pocs/linux/kernelctf/CVE-2024-50264_lts_cos/docs/exploit.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,4 @@
# Vulnerability
---
This vulnerability occurs because the vsk->trans pointer in virtio_transport_destruct() is not initialized to NULL after being freed, resulting in a dangling pointer.
```cpp
void virtio_transport_destruct(struct vsock_sock *vsk)
Expand Down Expand Up @@ -38,9 +37,8 @@ static bool virtio_transport_space_update(struct sock *sk,
```

# Race Condition Scenario
---
This vulnerability is a race condition that must be triggered by precisely controlling the `vsock_loopback_work()` worker used for loopback communication. The full scenario is as follows and can be divided into three main flows.
```cpp
```text
cpu0 cpu1
socket(A) // [1.1]
Expand Down Expand Up @@ -693,4 +691,4 @@ int main(int argc, void *argv[])

[...]
}
```
```

0 comments on commit aa7cc3d

Please sign in to comment.