Use-After-Free in Linux Kernel FUSE Filesystem (CVE-2022-1011)

This repository is a proof-of-concept (PoC) exploit for CVE-2022-1011, a vulnerability in the Linux kernel's FUSE subsystem related to the asynchronous nature of splice and FUSE write operations. The exploit is implemented in C and consists of two main files: 'exp.c' (the main exploit logic) and 'exp.h' (supporting structures and definitions). The Makefile is used to build the statically linked exploit binary. The exploit works by creating a new user and mount namespace, opening /dev/fuse, and mounting a FUSE filesystem at './tmp'. It then orchestrates a series of FUSE operations, including memory mapping and write requests, to demonstrate that a reference to a memory page can be retained after a write operation is completed. This behavior could potentially be leveraged for information disclosure or other attacks, depending on the kernel and FUSE configuration. The exploit does not provide a shell or direct privilege escalation, but serves as a technical demonstration of the vulnerability. The README provides background and a link to the upstream kernel patch. The main entry point is 'exp.c', which contains the full exploit logic.