3 ms·
They load a kernel driver so your avoidance of LD_PRELOAD wouldn’t really be able to protect against this anyway.
by saagarjha 2y ago
They load a kernel driver so your avoidance of LD_PRELOAD wouldn’t really be able to protect against this anyway.
- gorgonical 2y agoUnless I misread they don't state exactly how the attack escalates privileges to install the driver. Could there be two versions of the attack with varying levels of severity?