2022-06-22 06:25:28

by Muni Sekhar

Subject: Linux: Use-After-Free exploitation

Hi All,

Use-After-Free bugs result in kernel crashes. If these bugs result in
kernel crashes then how is it possible to exploit this vulnerability
for local privilege escalation?

--
Thanks,
Sekhar

2022-06-22 23:15:08

by Kees Cook

Subject: Re: Linux: Use-After-Free exploitation

On Wed, Jun 22, 2022 at 11:38:39AM +0530, Muni Sekhar wrote:
> Use-After-Free bugs result in kernel crashes. If these bugs result in
> kernel crashes then how is it possible to exploit this vulnerability
> for local privilege escalation?

There are many examples of manipulating memory layout in a way that an
attacker can control. For example, see:
https://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html

--
Kees Cook