Messages in this thread | | | Date | Wed, 22 Jun 2022 16:06:18 -0700 | From | Kees Cook <> | Subject | Re: Linux: Use-After-Free exploitation |
| |
On Wed, Jun 22, 2022 at 11:38:39AM +0530, Muni Sekhar wrote: > Use-After-Free bugs result in kernel crashes. If these bugs result in > kernel crashes then how is it possible to exploit this vulnerability > for local privilege escalation?
There are many examples of manipulating memory layout in a way that an attacker can control. For example, see: https://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html
-- Kees Cook
| |