Re: [kernel-hardening] Re: [RFC v1] mm: SLAB freelist randomization
From: Yves-Alexis Perez
Date: Thu Apr 07 2016 - 12:18:38 EST
On mer., 2016-04-06 at 14:45 -0700, Kees Cook wrote:
> > This security feature reduces the predictability of
> > the kernel slab allocator against heap overflows.
>
> I would add "... rendering attacks much less stable." And if you can
> find a specific example exploit that is foiled by this, I would refer
> to it.
One good example might (or might not) be the keyring issue from earlier this
year (CVE-2016-0728):
http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-ker
nel-vulnerability-cve-2016-0728/
Regards,
--
Yves-Alexis
Attachment:
signature.asc
Description: This is a digitally signed message part