Linux OVSwrap Local Privilege Escalation Exploit

This module exploits the OVSwrap nested-action length wrap on an affected Linux x86-64 kernel. It writes a generated Core Impact agent ELF to the target, creates a private user/network namespace, leaks kernel pointers through OVS actions, reads kernel memory, and applies a targeted 32-bit decrement to the local ProxyCall process credential. To bridge Generic Netlink, the module uploads and runs a statically linked Linux x86-64 transport ELF. The helper creates its own private user/network namespace; all CVE-specific exploit logic and kernel-build records remain in this module. The module writes a temporary passwordless sudo rule and runs the generated agent through sudo. It removes the rule after a root agent connects when it used a sudoers drop-in. The kernel must provide Open vSwitch, conntrack labels and FTP helper support, and allow unprivileged user/network namespaces. A matching embedded kernel-build record is preferred; otherwise local symbols, BTF or unstripped objects, and pahole are required for dynamic derivation. At least 2 GiB RAM is recommended.