Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)

/ Local root exploit for CVE-2014-0038. https://raw.github.com/saelo/cve-2014-0038/master/timeoutpwn.c Bug: The X86X32 recvmmsg syscall does not properly sanitize the timeout pointer passed from userspace. Exploit primitive: Pass a pointer to a kernel address as timeout for recvmmsg, if the...

symtdi. sys local privilege elevation vulnerability-vulnerability warning-the black bar safety net

The recent adoption of the disassembly analysis found a symantec of the vulnerability, this vulnerability is in symtdi.sys in the presence of, by the To the driver in the processing IRPMJDEVICECONTROL routine does not check the user passed a buffer address of legitimacy, Cause any kernel address ...