3 ms·
Thank you. But CVE seems to disagree with the headline? > The highest threat from this vulnerability is to data integrity, confidentiality and system availabil
by e12e 5y ago
Thank you. But CVE seems to disagree with the headline?
> The highest threat from this vulnerability is to data integrity, confidentiality and system availability.
Or is this more of a "read/modify /etc/shadow or /sbin/su" kind of thing?
- tptacek 5y agoAs I read it: it's a kernel UAF; memory corruption, in the context of the kernel. There's a secondary attack vector related to the refcount mishandling, where you can obtain control of file table entries after an `execve`, even if you exec a SUID, which is also bad.