PageJack in Action: CVE-2022-0995 exploit

Introduction In this article, we will explore how a relatively old CVE can be exploited using PageJack, a modern kernel exploitation technique introduced in 2024 by Zhiyun Qian at Black Hat USA. You can find a link to the full exploit at the end of this article. The vulnerability (CVE-2022-0995) CVE-2022-0995 is an out-of-bounds (OOB) write vulnerability caused by an incorrect bounds check in the watch_queue event notification mechanism of the Linux kernel. It affects kernel version 5.17 and abo...