New Linux Kernel Exploit Technique ‘SLUBStick’ Discovered by Researchers Aug 07, 2024Ravie LakshmananLinux / Vulnerability Cybersecurity researchers have shed light on a novel Linux kernel exploitation technique dubbed SLUBStick that could be exploited to elevate a limited heap vulnerability to an arbitrary memory read-and-write primitive. “Initially, it exploits a timing Read more…
CISA Alerts Federal Agencies to Patch Actively Exploited Linux Kernel Flaw The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Linux kernel to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Tracked as CVE-2024-1086 (CVSS score: 7.8), the high-severity issue Read more…
Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks The notorious Lazarus Group actors exploited a recently patched privilege escalation flaw in the Windows Kernel as a zero-day to obtain kernel-level access and disable security software on compromised hosts. The vulnerability in question is CVE-2024-21338 (CVSS score: 7.8), which can Read more…
Solving Uninitialized Kernel Pool Memory on Windows | MSRC Blog This blog post outlines the work that Microsoft is doing to eliminate uninitialized kernel pool memory vulnerabilities from Windows and why we’re on this path. For a background on why uninitialized memory matters and what options have been used in Read more…
![TraceRoutine (1, “The MMIO base address is exx08x.”, <em>((unsigned int</em>)a1 + 12));
_LABEL_7:
_mm_1fence();
PVAMapping = MmMapIoSpaceEx(a1[6], <em>((unsigned int</em>)a1 + 14), 4164);// PAGE_READWRITE
a1[8] = pVAMapping;
if (!pVAMapping )
return exc000009A164;
__mm_1fence();
CACHE_VA_REGION (PVAMapping);
v17[0] = 0;
v19 = 0164;
// STATUS_INSUFFICENT_RESOURCES
// Store Mapped MMIO Region VA in Global
TraceRoutine_0(&v19, “IISPHWConfigManager::Dereference”);
if (_InterlockedExchangeAdd((volatile signed __int32 *)a1 + 10, 0xFFFFFFFF) == 1)](https://i0.wp.com/owasp.or.id/wp-content/uploads/2023/11/Exploring-a-New-Class-of-Kernel-Exploit-Primitive-MSRC.png?resize=360%2C181&ssl=1)
Exploring a New Class of Kernel Exploit Primitive | MSRC Blog The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSRC receives a wide variety of cases spanning different products, bug types and exploit primitives. One particularly interesting primitive we see is an arbitrary kernel Read more…