Skip to content

Failed on Pixel 8 Pro #5

Description

@Beraphy

Hi. Thank you for the work. I am trying to run the exploit on Pixel 8 Pro.

Pixel 8 Pro
husky-ap2a.240705.005
5.15.137-android14-11-g316696f1d1a4-ab11798290

The kernel version:

% cat pixel.kallsyms| grep Version
[+] Version string: Linux version 5.15.137-android14-11-g316696f1d1a4-ab11798290 (build-user@build-host) (Android (10087095, +pgo, +bolt, +lto, -mlgo, based on r487747c) clang version 17.0.2 (https://android.googlesource.com/toolchain/llvm-project d9f89f4d16663d5012e5c09495f3b30ece3d2362), LLD 17.0.2) #1 SMP PREEMPT Fri May 3 09:41:21 UTC 2024
% adb shell "uname -a"
Linux localhost 5.15.137-android14-11-g316696f1d1a4-ab11798290 #1 SMP PREEMPT Fri May 3 09:41:21 UTC 2024 aarch64 Toybox

But it failed:

husky:/data/local/tmp $ ./exp pixel.kallsyms                                   
got 0xffffffc00990a5f0 for anon_pipe_buf_ops
got 0xffffffc00a7b9b00 for init_task
got 0xffffffc00a904128 for selinux_state
global data at 0x7ee912a000, buffer at 0x7ee7fb8000
preparing...
[*] STAGE 1: defragmentation
[*] STAGE 2: trigger the bug
[*] STAGE 3: free the cache
[*] STAGE 4: reclaim the page
FIONREAD pipe 1 is 1
failed, please retry
^C

Is this exploit fixed on my device? Cause the version is the latest one.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions