[CVE-2023-42752] integer overflow in Linux kernel leading to exploitable memory access

[CVE-2023-42752] integer overflow in Linux kernel leading to exploitable memory access https://seclists.org/oss-sec/2023/q3/192

19/09/2023 21:02:46

I recently found an integer overflow in the Linux kernel, which leads
to the kernel allocating skb_shared_info in the userspace, which is
exploitable in systems without SMAP protection since skb_shared_info
contains references to function pointers.

Liens par page

Filtres