Skip to content

Linux Kernel (SLUB/SLAB) #31

Open
Open
Linux Kernel (SLUB/SLAB)#31

Description

@zachriggle
zachriggle
opened on Jan 25, 2017

It'd be nice to see some write-ups on SLUB / SLAB exploitation.

It should be relatively easy to rip out the allocator and turn it into a user-space library a la LD_PRELOAD.

Activity

  1. zardus commented on Jan 25, 2017

    @zardus
    zardus
    on Jan 25, 2017
    Member

    That'd be really cool! Some relevant resources:

    LKL might be applicable to this usecase, though I haven't looked into it.

  2. kotee4ko commented on Jun 14, 2021

    @kotee4ko
    kotee4ko
    on Jun 14, 2021

    It's seems that pointer mangling protection in 2.32 work the same as CONFIG_SLAB_FREELIST_HARDENED=y
    I think, it will be very very nice to read some material about techniques to deal with that type of exp from you, guys.
    Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions