Received: by 2002:a6b:fb09:0:0:0:0:0 with SMTP id h9csp4509897iog; Tue, 21 Jun 2022 23:25:28 -0700 (PDT) X-Google-Smtp-Source: AGRyM1v1zUUWEpOanfSMaxxJZZxSqVSe4euPAFH8L4dkjvk2c5SUT5gedwo2ZhozIS1GdSkJIjas X-Received: by 2002:a17:906:7295:b0:712:2241:2c3f with SMTP id b21-20020a170906729500b0071222412c3fmr1674426ejl.523.1655879127834; Tue, 21 Jun 2022 23:25:27 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1655879127; cv=none; d=google.com; s=arc-20160816; b=zc4lyLDvPi0S5P1KTi5zSb+LO9poDllrOhe0K41miZXQHTm2/yYWALt5EtUxUqbYCJ T0RX3bQfJTus2df5ATtGHn4wDYOo8CiGuKXMD+rgp7qT1K5IlSlda2jtCj8RRzEjYdcJ levRzEZGNOfIpcVWZUwWgLKtzl3FqCvH7YlI2jyuuMItHAI/a6l30X0nb6HJniJY5AVX zFWYZ6zAWcZ5WrLwam1yOwe/Bh/NGdv5TGSu1Fs3YicbeOsIy2celn25xdPRwtVQU6IC mfQpoiVU4HVIyQ2Jq1n3S+U+37otjKr5sGSPE7ufbeZzJH/7NdRyRa1qx9lpKgrYQt/G dwSA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:mime-version :dkim-signature; bh=S7mjpK/M+Dj2QUAMVzQMxy95Nz35P2kWVi4qmBs9FaI=; b=UoZya7WpNNRL+QKZkyB4dzsvgtjNcwKDBIiv8XQnsADRNGMPv2qvHAlzyE4I8LrRi8 IXS5zoLa4YubRO9r2yEPdz9c58sYYnu39UcfAfXgDIdxX+Ynmgv4T1XQA0WwA8T2s/1y GTGREv2nDwEsJbNVbPK7NbyKftO8Yu+UzRluqfnqLC+u4inorF6RGMgWM5CB2m6M7nA7 hZy4wCM7zW5G8BtabTYJGf5CTKDYlpd3W/ZHh3qxK3e4c2bttuqnglrWXvBtZNnXuJU6 O0/wR4ppgC/53NvWPgKBeqsBK9jsz7mhJisGPOg2GD7oJeG4mZF7uRrvothHpeHGf3KP 0rhQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=c8zZsZw4; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id t32-20020a056402242000b0042dc9a133a6si13446190eda.423.2022.06.21.23.25.01; Tue, 21 Jun 2022 23:25:27 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=c8zZsZw4; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1356916AbiFVGIz (ORCPT + 99 others); Wed, 22 Jun 2022 02:08:55 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55506 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230006AbiFVGIx (ORCPT ); Wed, 22 Jun 2022 02:08:53 -0400 Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 171E51CB21; Tue, 21 Jun 2022 23:08:53 -0700 (PDT) Received: by mail-lj1-x22e.google.com with SMTP id o23so10928834ljg.13; Tue, 21 Jun 2022 23:08:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:from:date:message-id:subject:to:cc; bh=S7mjpK/M+Dj2QUAMVzQMxy95Nz35P2kWVi4qmBs9FaI=; b=c8zZsZw4yF2vD84Jltja4RRpT8reCc8d2zsGZN+JAw2NKxHlnoRrcjI9V34HOhYhrq yJybnHfegsg7hw3BdOmAgjmocK5GbfRu2BiUJKZUtSC7De/YGZoi+T0W5JtjTeHNAirH plrQKjHHERe62ewez8bYjDlUV46Cwb5hoaq6AXfSSU3aTs7xeQF3uwWQTSHmVSZf1aG+ ztzA8kjRd6Zr5zX2pAmYig55b8hX5lU2YLFzj7beYA78qmjkgJ7E62dx08/9Jz5UUXVZ Pf0zQpKOjXk1Dg+Z59xiB10nXn53xZrq5mNNn+RJ9peIGLXbbdFjgNy4eDhPVI9DCD9q nGJQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=S7mjpK/M+Dj2QUAMVzQMxy95Nz35P2kWVi4qmBs9FaI=; b=Zcu3ykLrjeew5KQaXB3bOBkDLQFAxTbxBynBUApTgkTHhKjaUIQNCAUW+IaY7PaMCC AYQmx+F0A0Axalb1bNf64+hwVy7RM+DnQBc2mVnJFDPai8pKLWNCG6X8HfIOOXWkfEIE Jjsqj/CNn6b8MhHS9ZYr99ND3LqZq3GRnb2aRfVVRMo4r7iEBzjb/PnCxs8bOmRSEvag K1KlbhIOsGO8uMXOQIXPcgHDTfT4huQ0tP3SjoVhG0PR3DajSXWcwwAeVhtT9MBJcOjl 1IGxiqPz+Z0/8t40TUJnVHRqtScSZ5086FXiVxCpBjL9FSaz2v4q/nnJqwJ3Imc5wHjn fIrQ== X-Gm-Message-State: AJIora/1lcmhCUxsIrNqyhXIMgATKE1f1fXMVZ8zTXQVZdDiDuDlABbn 3eiQhWb2VnhlpvJjR+h2WGnGitGpieb0pBxFWXozkLF8m/o= X-Received: by 2002:a2e:a90c:0:b0:258:edc3:4d2b with SMTP id j12-20020a2ea90c000000b00258edc34d2bmr956668ljq.225.1655878130979; Tue, 21 Jun 2022 23:08:50 -0700 (PDT) MIME-Version: 1.0 From: Muni Sekhar Date: Wed, 22 Jun 2022 11:38:39 +0530 Message-ID: Subject: Linux: Use-After-Free exploitation To: linux-hardening@vger.kernel.org, linux-security-module@vger.kernel.org Cc: LKML Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM, RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi All, Use-After-Free bugs result in kernel crashes. If these bugs result in kernel crashes then how is it possible to exploit this vulnerability for local privilege escalation? -- Thanks, Sekhar