Exploiting Stack Overflows in the Linux Kernel

[Nytro]

Exploiting Stack Overflows in the Linux Kernel

In this post, I’ll introduce an exploitation technique for kernel stack overflows in the Linux kernel. Keep in mind this does not refer to buffer overflows on the kernel stack (whose exploitability is well understood), but rather the improper expansion of the kernel stack causing it to overlap with critical structures which may be subsequently corrupted. This is a vulnerability class in the Linux kernel that I do not believe have been exploited publicly in the past, but is relevant due to a recent vulnerability in the Econet packet family

©2010 Job Oberheide (jon.oberheide.org)

Download:

http://www.exploit-db.com/wp-content/themes/exploit/docs/15634.pdf