2 ms·
What is this a response to? This already happens though - the kernel can't modify its own code pages. But there are plenty remaining attacks like overwriting fu
by astrange 2y ago
What is this a response to? This already happens though - the kernel can't modify its own code pages. But there are plenty remaining attacks like overwriting function pointers or other data.
- dcow 2y agoIf you can’t modify kernel memory then how do you overwrite function pointers? (I understand how rop works.) At some level you have to get privileged execution and doing so would be incredibly difficult if you can’t trick the kernel at some point after whatever amount of ropping you’ve done.