Kernel Exploitation Techniques: modprobe_path
Let's kick things off with a modern day staple for local privilege escalation (LPE) in Linux Kernel Exploitation, modprobe_path.…
LiKE: A Series on Linux Kernel Exploitation
Thought the Linternals series was hype? Get ready for the even SEO friendlier LiKE, a series on Linux kernel exploitation.…
Linternals: Introducing Memory Allocators & The Page Allocator
I know you've all been waiting for it, that's right, we're going to be taking a dive into another exciting aspect of Linux internals: memory allocators!…
Linternals: The Kernel Virtual Address Space
In this part of our journey into virtual memory in Linux, we cover the mystical kernel memory map and all it entails.…
Patching, Instrumenting & Debugging Linux Kernel Modules
An introductory look into patching, instrumenting and debugging Linux kernel modules.…
Linternals: The User Virtual Address Space
We continue our journey to understand virtual memory in Linux, as we take a closer look at the user virtual address space.…
CVE-2022-0435: A Remote Stack Overflow in The Linux Kernel
Recently I discovered a vulnerability in the Linux kernel that's been lurking there since 4.8 (July 2016)! CVE-2022-0435 is a remotely and locally exploitable stack overflow in the TIPC networking module of the Linux kernel…
A Dummy's Guide to Disclosing Linux Kernel Vulnerabilities
A post sharing some insights into the process behind responsibly disclosing vulnerabilities in the Linux kernel...…