module: pwnkit

host_distro: Ubuntu 20.04.6 LTS

expect_detect: VULNERABLE

actual_detect: VULNERABLE

status: match


host_distro: Debian GNU/Linux 11 (bullseye)


module: entrybleed

host_distro: Ubuntu 22.04.3 LTS


module: overlayfs


host_distro: Debian GNU/Linux 12 (bookworm)

actual_detect: OK

status: MISMATCH


module: sequoia


host_distro: Ubuntu 18.04.6 LTS


module: stackrot


module: tioscpgrp


module: dirtydecrypt


module: refluxfs

host_distro: Rocky Linux 9.8 (Blue Onyx)


host_distro: Ubuntu 20.04 LTS (frozen 20200423)

verified_kind: exploit

root_witness: uid=0(root); wrote /root/

status: root


root_witness: uid=0(root); wrote /root/ (after gconv-layout fix)


root_witness: none — honest fail (heap not landed)


root_witness: none — honest fail (cgroup/userns precondition on this host)


verified_kind: detect

expect_detect: OK

root_witness: n/a — 5.4 predates the bug (5.8), correctly not-vulnerable


host_distro: Ubuntu 22.04.0 (frozen, genuinely vuln - predates Ubuntu 5.15.0-70 fix)

root_witness: none - module technique broken (chown merged carrier: EPERM); needs CVE-2023-0386 FUSE copy-up PoC port


host_distro: Ubuntu 22.04.0 (frozen)

root_witness: none - kernel 5.15.0-25.25 likely carries Ubuntu backported fix (USN-5317); detect is version-blind. Needs a pre-fix kernel to verify exploit


host_distro: Ubuntu 18.04.2 (frozen, genuinely vuln - pre 4.15.0-58 fix)

root_witness: NONE - false positive. PTRACE_ATTACH to parent(1) EPERM, wrong technique; reports OK via exec-transfer. Needs CVE-2019-13272 PoC port


root_witness: none - honest fail (heap not landed on this libc)


host_distro: Ubuntu 18.04.2, sudo 1.8.21p2 + sudoers (ALL,!root) rule

root_witness: uid=0(root) via sudo -u#-1; module popped root shell