Linux Kernel Security

Finding and exploiting a bug in an old Android phone

Finding and exploiting a Linux kernel bug in an old Motorola phone. A stream, live right now! By Brandon Falk.

Live: https://www.twitch.tv/gamozo
Part 1: https://www.youtube.com/watch?v=g62FXds2pt8
Part 2: https://www.youtube.com/watch?v=qnyFk-f3Koo

Debugging the Kernel with QEMU by Keith Makan

The first post of a potential upcoming Linux kernel exploitation series. Building and running Linux kernel in QEMU. Debugging a kernel module with GDB.

https://blog.k3170makan.com/2020/11/linux-kernel-exploitation-0x0-debugging.html

We now have a chat for comments and discussions: @linkersec_chat

PLATYPUS: Software-based Power Side-Channel Attacks on x86

Side-channel attack via Intel Running Average Power Limit (RAPL). On Linux RAPL counters are available to unprivileged users, and the attack allows leaking encryption keys from kernel modules and bypassing KASLR.

Info: https://platypusattack.com/
Paper: https://platypusattack.com/platypus.pdf
Fix: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=949dd0104c496fa7c14991a23c03c62e44637e71

kasan: boot parameters for hardware tag-based mode

Patchset, part of the Memory Tagging in production effort.

https://lkml.org/lkml/2020/11/4/1338

The Linux eBPF verifier, the gift that keeps on giving

An LPE exploit for CVE-2020-27194.

https://haxx.in/blasty-vs-ebpf.c

Fuzzing for eBPF JIT bugs in the Linux kernel

By Simon Scannell.

https://scannell.me/fuzzing-for-ebpf-jit-bugs-in-the-linux-kernel/

Linux kernel exploitation collection updates

Materials updates for September/October.

https://github.com/xairy/linux-kernel-exploitation/commit/bedc708384015c8c5535d6ee947363659fbf4227

Linux Kernel Security pinned «The existing collection of links related to Linux kernel security and exploitation is here: https://github.com/xairy/linux-kernel-exploitation New articles, talks, and other updates will be published as new posts on this channel.»

The existing collection of links related to Linux kernel security and exploitation is here:

https://github.com/xairy/linux-kernel-exploitation

New articles, talks, and other updates will be published as new posts on this channel.

Channel name was changed to «Linux Kernel Security»

Linux Kernel Security pinned Deleted message

Channel created