USMA: Share Kernel Code With Me
summary
Describes USMA, an approach to overcome limitations of gadget-based kernel attacks on Linux—particularly the difficulty of locating suitable gadgets and the constraints imposed by control-flow integrity mitigations like ARM PAC—by sharing or reusing kernel code to enable exploitation. Discusses techniques and tooling for finding or creating usable kernel code pieces to bypass those obstacles.
AI-written summary · about
chapters (5)
related talks
35mKSMA: Breaking Android Kernel Isolation and Rooting with ARM MMU Features
35mMake KSMA Great Again: The Art of Rooting Android Devices by GPU MMU Features
24mCurrent State of Exploit Mitigations in the Linux Kernel
35mKernel Alchemy: Crafting Mobile Kernel Code to Evade Modern RASP Protections
44mDeep Analysis of Exploitable Linux Kernel Vulnerabilities 2017-2019
29mThwarting Unknown Bugs: Hardening Features in the Mainline Linux Kernel
21mSoK: Where’s the “up”?! A Comprehensive (bottom-up) Study on the Security of...
47mHow to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine