A recently discovered vulnerability in Linux's SCTP (Stream Control Transmission Protocol) networking code has been used to gain full root access on a host, and escape a container. This exploit is based on a 18-year-old bug that has been present in the code since 2008. The researchers from Tencent identified the vulnerability and demonstrated its potential for exploitation.
The exploit involves a use-after-free bug, where a memory location is freed but still accessed, allowing an attacker to gain control of the system. The vulnerability affects the SCTP implementation in Linux kernels 7.1.6, 6.18.42, 6.12.101, and 6.6.148. The researchers found that the bug could be used to gain root access on the host and escape a container, demonstrating the potential for a significant security risk.
The researchers from Tencent have confirmed that the bug has been fixed in the latest stable Linux kernels, which include versions 7.1.6, 6.18.42, 6.12.101, and 6.6.148. However, it is essential to ensure that all systems running these kernels are updated with the latest patches to prevent potential exploitation.
This exploit highlights the importance of regularly updating Linux systems and ensuring that all kernel versions are up-to-date. It also underscores the need for a thorough security audit to identify and address any potential vulnerabilities in the code.
Note: The researchers from Tencent did not provide a publicly available exploit code for this vulnerability. As a result, it is recommended that users and administrators take extra precautions to secure their systems against potential exploitation.