Hi. Thank you for the work. I am trying to run the exploit on Pixel 8 Pro.
| Pixel 8 Pro |
| husky-ap2a.240705.005 |
| 5.15.137-android14-11-g316696f1d1a4-ab11798290 |
The kernel version:
% cat pixel.kallsyms| grep Version
[+] Version string: Linux version 5.15.137-android14-11-g316696f1d1a4-ab11798290 (build-user@build-host) (Android (10087095, +pgo, +bolt, +lto, -mlgo, based on r487747c) clang version 17.0.2 (https://android.googlesource.com/toolchain/llvm-project d9f89f4d16663d5012e5c09495f3b30ece3d2362), LLD 17.0.2) #1 SMP PREEMPT Fri May 3 09:41:21 UTC 2024
% adb shell "uname -a"
Linux localhost 5.15.137-android14-11-g316696f1d1a4-ab11798290 #1 SMP PREEMPT Fri May 3 09:41:21 UTC 2024 aarch64 Toybox
But it failed:
husky:/data/local/tmp $ ./exp pixel.kallsyms
got 0xffffffc00990a5f0 for anon_pipe_buf_ops
got 0xffffffc00a7b9b00 for init_task
got 0xffffffc00a904128 for selinux_state
global data at 0x7ee912a000, buffer at 0x7ee7fb8000
preparing...
[*] STAGE 1: defragmentation
[*] STAGE 2: trigger the bug
[*] STAGE 3: free the cache
[*] STAGE 4: reclaim the page
FIONREAD pipe 1 is 1
failed, please retry
^C
Is this exploit fixed on my device? Cause the version is the latest one.
Hi. Thank you for the work. I am trying to run the exploit on Pixel 8 Pro.
The kernel version:
But it failed:
Is this exploit fixed on my device? Cause the version is the latest one.