When I look for proof-of-concepts of a security vulnerability, I often see this kind of Github repositories:
You could see that there is a pattern here in the name. Also, in the list of commits, there is almost nothing. At first I thought they had malware or something that would run when we tried to use them. But no, I diffed the content of these repos and the official linux 4.19.72, and they were almost identical. There were some minor differences, but they can't be malicious:
Only in linux-4.19.72_CVE-2023-0386: .whitesource Files linux-4.19.72_CVE-2023-0386/fs/overlayfs/copy_up.c and official_linux-4.19.72/fs/overlayfs/copy_up.c differ 780,783d779 < if (!kuid_has_mapping(current_user_ns(), ctx.stat.uid) || < !kgid_has_mapping(current_user_ns(), ctx.stat.gid)) < return -EOVERFLOW;
These two repos are just examples, and there are many other similar ones. Does anyone know why people created such repos? Some malicious intent here that I haven't figured out?