Linux Kernel leaf anon_vma Double-Reuse Use-After-Free

This repository is a proof-of-concept (PoC) local privilege escalation exploit targeting Linux kernel (specifically 5.15.103, but the technique is more general) inspired by CVE-2022-42703 and related research by Project Zero. The exploit demonstrates how to leverage a custom vulnerable kernel module (vuln.ko) that provides an arbitrary kernel memory write primitive via ioctl on /dev/vuln. The exploit (exp.c) orchestrates a complex attack: it uses hardware breakpoints and the cpu_entry_area (which is not randomized by KASLR) to leak the kernel stack canary and KASLR base, then constructs a ROP chain to escalate privileges by calling commit_creds(init_cred). The exploit is designed to run in a QEMU virtual machine with a custom kernel and rootfs, as set up by boot.sh. The repository includes supporting headers, a FUSE-based helper, and scripts for building and running the exploit environment. The main entry point is exp.c, which interacts with /dev/vuln and performs the full exploitation chain. The exploit is a PoC and requires a controlled environment with the vulnerable module loaded; it is not weaponized for real-world attacks but demonstrates a powerful exploitation technique against modern Linux kernel mitigations.