|
Exploiting kmalloc Based Buffer Overflows |
|
|
|
|
Tuesday, 04 October 2005 |
Summary
kmalloc - "Linux Kernel memory allocation routine, kmalloc() ensures physical address contiguity". Qobaiashi has published a paper that introduces a technique that would allow attackers to exploit kmalloc based overflows in Linux kernel modules.
Credit:
The information has been provided by qobaiashi.
Original article:The original article can be found at: http://home.bn-paf.de/sebastian.haase/
Details
Qobaiashi focus on a mechanism to exploit the Linux kernel for local privilege. He explains how Slab Allocation process works and finally how to reliably exploit overflows to execute arbitrary code. |