Derandomizing the Location of Security-Critical Kernel Objects in the Linux Kernel
Presents a novel timing side-channel attack on the TLB, combined with kernel allocator massaging, to derandomize the location of security-critical kernel objects in the latest Linux kernel.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Hack In The Box Security Conference·54 min
Sam Page
Sam Page examines #HITB2022SIN E'rybody Gettin' TIPC: Demystifying Remote Linux Kernel Exploitation.
exploitationlinuxkernel+2
Black Hat·38 min
Barnaby Jack
Analysts investigate attack surfaces and defenses concerning USA 2005 - Remote Windows Kernel Exploitation - Step In To the Ring 0.
windowsexploitationkernel+2
IEEE Symposium on Security and Privacy·18 min
Industry experts analyze emerging threats surrounding GREBE: Unveiling Exploitation Potential for Linux Kernel Bugs.
exploitationlinuxkernel+1