1 matches found
kernel: ASLR bypass for setuid binaries due to late install_exec_creds()
A flaw in the loadelfbinary function in the Linux kernel allows a local attacker to leak the base address of .text and stack sections for setuid binaries and bypass ASLR because installexeccreds is called too late in this function...
4.7CVSS7.2AI score0.00481EPSS
SaveExploits1References4
20