Collaborate Disseminate
Starting with kernel 5.13 RiscV will get XIP where parts of the kernel run from non volatile memory like flash. In theory you could make parts of the kernel really read only either from the hardware side by storing on a write protected chi… Continue reading Can XIP (execute in place) be used for kernel protection?
(excluding toy, academic-only, and unmaintained)
My use-case is getting nontechnical people to have servers deployed for them, and for neither me nor them to worry about [attended] maintenance and security. Maximum of 3 binaries deployed, … Continue reading Are there any kernel’s which can upgrade without reboot? [migrated]
(excluding toy, academic-only, and unmaintained)
My use-case is getting nontechnical people to have servers deployed for them, and for neither me nor them to worry about [attended] maintenance and security. Maximum of 3 binaries deployed, … Continue reading Are there any kernel’s which can upgrade without reboot? [migrated]
Anyone could have found these bugs, but everyone assumed someone would, and in the end, no one did. (Until now.) Continue reading Serious Security: The Linux kernel bugs that surfaced after 15 years
This question is intended for better understanding of security features of Android architecture.
In particular, I want to know what part of the architecture needs to be secure to prevent an attacker from gaining control of the hardware (sa… Continue reading Vulnerability in which part of the Android architecture would allow an attacker to take control of the hardware
We are extraordinarily fortunate to live at a time in which hardware with astounding capabilities can be had for only a few dollars. Systems that would once have taken an expensive pile of chips and discretes along with months of …read more
Continue reading Why Blobs Are Important, And Why You Should Care
It was mentioned in this thread that kernel exploits usually use syscalls to trigger undesired behavior:
How can you detect kernel exploits?
Are there any ways or known examples which do not use syscalls?
What about programs beyond the ker… Continue reading Does a (kernel) exploit always need to use system calls?
As per Exclude or display vulnerabilities for non-running Linux kernels :
It is possible to have multiple kernels detected on a single Linux
host and Qualys will report all vulnerabilities found on all Linux
kernels.
Linux distributions … Continue reading Vulnerabilities for multiple kernel versions that are installed on a given server
Google’s Android security update addressed 43 bugs overall affecting Android handsets, including Samsung phones. Continue reading Google Warns of Critical Android Remote Code Execution Bug
I am currently learning to perform pen tests. As the server I used is vulnerable to dirtycow, I hoped to exploit it. It compiles fine and when I run it, it says the username "firefart" was created and can be accessed with the pas… Continue reading No user is created after running Dirty COW exploit [closed]