Disqus - Latest Comments for Spender2001

Re: Another Linux Kernel Flaw Emerges

Spender2001 — Fri, 14 Aug 2009 12:27:57 -0000

My exploit still defeats SELinux on the latest updated kernels:
It works on all 2.4/2.6, x86, x64, 4k stacks, 8k stacks, creds support or not, bypasses mmap_min_addr if they're still unpatched to that, disables SELinux, AppArmor, LSM, auditing, etc.

http://grsecurity.net/~spen...

-Brad

Re: Researcher Uses New Linux Kernel Flaw to Bypass SELinux, Other Protections

Spender2001 — Sat, 18 Jul 2009 11:10:11 -0000

francky: It does use that (as they're credited in the exploit for it) but also a high severity vulnerability in SELinux that I discovered. That SELinux vulnerability likely exists on all systems using SELinux right now and is more relevant I think to users right now than this actual particular exploit.

-Brad

Re: Researcher Uses New Linux Kernel Flaw to Bypass SELinux, Other Protections

Spender2001 — Fri, 17 Jul 2009 16:15:32 -0000

Actually, I posted the first null ptr dereference exploit for Linux in 2007, similarly disabling SELinux and LSM, as noted in the exploit.