Canary in the Kernel Mine: Exploiting and Defending Against Same-Type Object Reuse

Fri, 21 Oct 2022 00:00:00 -0400

This blog covers a difficult-to-defend subclass of use-after-free vulnerabilities in the Linux kernel, grsecurity's defense for it, and why our defense required compiler plugin involvement. Included PoC exploits demonstrate the power and simplicity of this kind of vulnerability, as well as the effectiveness of grsecurity's defense.