Race For Root: The Analysis Of The Linux Kernel Race Condition Exploit (SHA2017)

preview_player
Показать описание
CVE-2017-2636 is a 7-year old race condition in the Linux kernel that was fixed by Alexander Popov in March, 2017. This vulnerability affected all major Linux distributions. It can be exploited to gain a local privilege escalation. In this presentation Alexander will describe the PoC exploit for CVE-2017-2636. He will explain the effective method of hitting the race condition and show the following exploitation techniques: turning double-free into use-after-free, heap spraying and stabilization, SMEP bypass.

#DeviceSecurity

Alexander Popov
Рекомендации по теме
Комментарии
Автор

It's really clear that guy is super smart, but I find it to difficult to understand what he's trying to say :(
Probably doesn't help I know jack about kernels though.

snappie