The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoResearchPeer-reviewed
Beyond Control: Exploring Novel File System Objects for Data-Only Attacks on Linux Systems
- Published
- Record updated
Summary
Researchers present the first semi-automatic study of exploitable non-control data in the Linux kernel's file system, using a custom static and dynamic analysis and testing framework. They categorize candidate file system objects by exploit strategy, including a method to overcome defenses that isolate many of these objects. The authors evaluate the objects against 18 real-world CVEs and build 10 end-to-end kernel exploits with all state-of-the-art mitigations enabled.