Utilizing Cross-CPU Allocation to Exploit Preempt-Disabled Linux Kernel
A talk (video) by Mingi Cho and Wongi Lee about exploiting a slab use-after-free bug in the netfilter subsystem and an out-of-bounds bug in the traffic control subsystem.
The researchers managed to exploit both bugs on the kernelCTF migitation instance. Notably, they relied on cross-CPU slab/page_alloc shaping techniques in both exploits.
Post #276
3.39K

- 🔥 14