Your Trash Kernel Bug, My Precious 0-day

The advance of kernel fuzzing techniques significantly benefits the discovery of kernel bugs. According to our statistics on Syzbot, Syzkaller has already unveiled more than 2,000 kernel bug reports on Linux over the past two years. From the security analysts' perspectives, a kernel bug report that demonstrates memory corruption usually receives more attention than those exhibiting only WARNING or NULL pointer dereference. It is simply because memory corruption is typically the prerequisite for exploiting the Linux kernel and obtaining unauthorized root privilege. In this talk, we will introduce a new technical method to turn those bugs with seemingly low-risk into memory corruption vulnerabilities... By: Yueqi Chen, Kang Li, Zhenpeng Lin & Xinyu Xing Full Abstract & Presentation Materials: https://www.blackhat.com/eu-21/briefi...