Exploiting linux kernel heap corruptions (SLUB Allocator)

[Nytro]

Exploiting linux kernel heap corruptions (SLUB Allocator)

Author: Simo Ghannam <mg_at_morxploit_dot_com>

Date: October 2013

MorXploit Research

MorXploit Research

1. Introduction :

in recent years , several researches on the Linux kernel security were done . The most

common kernel privilege vulnerabilities can be divided into several categories: NULL

pointer dereference , kernel space stack overflow ,kernel slab overflow , race conditions

… etc.

some of them are pretty easy to exploit and no need to prepare your own linux kernel

debugging environment to write the exploit, and some other requires some special

knowledges on Linux kernel design , routines , memory management … etc .

In this tutorial we will explain how SLUB allocator works and how we can make our

user-land code to be executed when we can corrupt some metadata from a slab

allocator .

Download:

http://www.morxploit.com/morxpapers/kernel_exploit_tut.pdf