3 ms·
Given that you can connect essentially PCIe devices thru USB it is probably exploitable? Find out which device is accessible to user and does MMIO, emulate it
by PunchyHamster 2mo ago
Given that you can connect essentially PCIe devices thru USB it is probably exploitable?
Find out which device is accessible to user and does MMIO, emulate it on FPGA, make it slooooooooow. All it needs to do is for driver to trigger a "right" access". GPU comes to mind
- Nextgrid 2mo agoUntil very recently, creating arbitrary USB/PCIe devices has been out of reach of hobbyists, as a result the device drivers (running with kernel privileges and written in memory-unsafe languages) generally have no hardening against a malicious device. You wouldn't need this exploit to get root (for that matter, this exploit _already_ requires root).
- yencabulator 2mo agoI think the USB bus forces timing on commands, though? I recall that was the primary reason it hasn't been transported over IP much.