/explore
|
You are here 
|
dayzerosec.com | ||
| | | | |
allelesecurity.com
In 2024, our research team noticed and wrote proofs of concept for a use-after-free vulnerability affecting the latest Red Hat Enterprise Linux 9 (RHEL 9). At the time, kernel version 5.14.0-503.15.1.el9_5. The vulnerability had been fixed on the Linux kernel upstream on July 17, 2023 [1][2]. After we reported it, it was backported to Red... |
|
| | | | | ||
| | | | |
a13xp0p0v.tech
CVE-2021-26708 is assigned to five race condition bugs in the virtual socket implementation of the Linux kernel. I discovered and fixed them in January 2021. In this article I describe how to exploit them for local privilege escalation on Fedora 33 Server for x86_64, bypassing SMEP and SMAP. |
|
| | | | | ||
| | | | |
www.willsroot.io
Vulnerability Research on Low-Level Systems |
|
| | | | | ||
| | | | |
blog.infosectcbr.com.au
Dr Silvio Cesare @silviocesare Summary Free list poisoning in a common heap exploitation technique which corrupts a heap allocators's linked list of free chunks. A future heap allocation will return the poisoned address. The Linux kernel introduced heap hardening which obfuscates the pointers in these linked lists. Without knowing secret keys and pointer addresses, an... |
|
| | | |||
