Linux Kernel tcindex Perfect-Hash Filter Use-After-Free

This repository is a full exploit for CVE-2023-1829, a Use-After-Free (UAF) vulnerability in the Linux kernel's netfilter/nftables subsystem. The exploit is written in C and is structured into multiple components: - The main exploit logic is in 'src/main.c', which orchestrates the attack by manipulating nftables/netlink objects, leaking kernel addresses, and performing heap spraying and UAF exploitation. - Helper modules (in 'src/' and 'inc/') handle kernel heap spraying (keyring, io_uring), netlink/nftables manipulation, and privilege escalation steps. - The exploit overwrites the kernel's 'modprobe_path' to point to a malicious script ('/tmp/x'), which, when triggered by executing a dummy file ('/tmp/dummy'), sets the SUID bit on a helper binary ('/tmp/get_root'). - The 'get_root_src/get_root.c' binary is a simple SUID shell spawner, which is executed to provide a root shell to the attacker. The exploit requires CAP_NET_ADMIN and is intended to be run in a new user and network namespace for isolation. It is operational and provides a working local privilege escalation path on vulnerable Linux kernels. The code is modular, with clear separation between kernel manipulation, heap spraying, and privilege escalation payload delivery. The repository does not target remote exploitation and does not contain detection-only scripts.