CVE-2023-3390: UAF on Linux Netfilter nftables MFT_MSG_NEWRULE leads to LPE. We exploit this tiny 1-day vuln to pwn all targets of Google's kernelCTF for the first time in history. Nice and clear triple-kill 🥳

For details about vuln, exploit, and our novel techniques & research:

Thanks to @0x10n for outstanding collaboration on COS exploit & post-exploit analysis, and @insu_yun & KAIST Hacking lab for unwavering support and encouragement!

this is awesome, great job writing all the exploits

Strong!

nice

@insitusec Great work, thanks for sharing! Netfilter, the subsystem that keeps giving.