CVE-2023-2598

环境搭建

Linux-v6.3

commit：457391b0380335d5e9a5babdec90ac53928b23b4

config：

defconfig+：

CONFIG_USER_NS=y
CONFIG_SECURITY_SELINUX_DISABLE=y #for debug

CONFIG_KALLSYMS=y
CONFIG_KALLSYMS_ALL=y
CONFIG_DEBUG_INFO_DWARF4=y #for msg_msg copy

CONFIG_CHECKPOINT_RESTORE=y #for syzkaller image

CONFIG_CONFIGFS_FS=y
CONFIG_SECURITYFS=y

CONFIG_SLAB_FREELIST_RANDOM=n
CONFIG_SLAB_FREELIST_HARDENED=n
CONFIG_SHUFFLE_PAGE_ALLOCATOR=n
CONFIG_HARDENED_USERCOPY=n
CONFIG_FORTIFY_SOURCE=n
CONFIG_STATIC_USERMODEHELPER=n
CONFIG_DEBUG_INFO_NONE=n
CONFIG_RANDOMIZE_BASE=n

CONFIG_BINFMT_MISC=y

CONFIG_E1000=y

CONFIG_E1000E=y

注释 CONFIG_SYSTEM_TRUSTED_KEYS / CONFIG_SYSTEM_REVOCATION_KEYS 这两行

sudo make  CFLAGS_KERNEL="-g" CFLAGS_MODULE="-g" -j4

参考

https://bsauce.github.io/2024/07/30/CVE-2023-2598/