Linux 2.6.30+/SELinux/RHEL5 Test Kernel Local Root Exploit 0day

日期: 2009/07/22 分类: 技术杂文 标签: , , , 添加回复

From: milw0rm

/* super fun 2.6.30+/RHEL5 2.6.18 local kernel exploit in /dev/net/tun
   A vulnerability which, when viewed at the source level, is unexploitable!
   But which, thanks to gcc optimizations, becomes exploitable :)
   Also, bypass of mmap_min_addr via SELinux vulnerability!
   (where having SELinux enabled actually increases your risk against a
    large class of kernel vulnerabilities)
 

阅读全文