Permalink
Switch branches/tags
Nothing to show
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
35 lines (27 sloc) 3.94 KB

Ring 0: Linux kernel vulnerablity & exploitation & silent fixes

"If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle." --- Sun Tzu

Kernel is what we called "Ring 0". It's the front line and the last place we can defense the those underneath adversaries effectively. Unfortunately, most people from FLOSS world lost their rights to access PaX/Grsecurity's stable and test patch, which is the only effective defense solution. KSPP is making the progress slowly and more bugs being introduced by misunderstanding some PaX/Grsecurity features and missing the context why PaX/Grsecurity created them in the 1st place. Some vulnerablities and exploits( Since KSPP started) targetting linux kernel in the wild will be listed here and most of them can be mitigated by PaX/Grsecurity without any fix.

Exploit vectors

Privilege Escalation

Auxlilary ingredients

Silent fixes from Linux kernel "community" ( Welcome to add more for fun!)

Other resouces

Linux Kernel Exploitation