Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/rooting-ubuntu-by-accident-and-samsung-kernel-bugs.html

We are back for the first 2022 binary episode, and its all kernel. Obtaining root through an hours long exploit process on Ubuntu thanks to an invalid free, use-after-free in XNU due to bad locking, and some terrible code in Samsung S20 DSP kernel driver with multiple integer overflows.

[00:00:42] Getting root on Ubuntu through wishful thinking

[00:19:21] XNU: heap-use-after-free in inm_merge

[00:29:42] Kernel LPE in the Vision DSP Kernel Driver [CVE-2021-25467]

[00:34:34] Kernel LPE in the Vision DSP Kernel Driver's ELF Linker [CVE-2021-25475]

[00:37:16] Linux Heap Exploitation - Part 3

[00:38:37] PS4 CCP Crypto Bug

The DAY[0] Podcast episodes are streamed live on Twitch (@dayzerosec) twice a week:

Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities
Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.

The Video archive can be found on our Youtube channel: https://www.youtube.com/c/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

Or follow us on Twitter (@dayzerosec) to know when new releases are coming.

[Binary] Rooting Ubuntu By Accident and Samsung Kernel Bugs 42:56 Share

Day[0]

Shownotes Transcript

[Binary] Rooting Ubuntu By Accident and Samsung Kernel Bugs