BetaMaxHeadroom / CVE-2021-33909

Sequoia exploit (7/20/21)

Sequoia (CVE-2021-33909)

Building

gcc exploit.c -o exploit

Running

chmod +x exploit
mkdir dir;./exploit $(pwd)/dir

Credits

"Our exploit requires approximately 5GB of memory and 1M inodes; we will publish it in the near future. A basic proof of concept (a crasher) is attached to this advisory and is available at: https://www.qualys.com/research/security-advisories/"

https://blog.qualys.com/vulnerabilities-threat-research/2021/07/20/sequoia-a-local-privilege-escalation-vulnerability-in-linuxs-filesystem-layer-cve-2021-33909