Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation

Papr Link

Authors

Ziyi Guo, Dang K Le, Zhenpeng Lin, Kyle Zeng, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé, Xinyu Xing

Description

Page Spray is a kernel exploitation technique which utilizes Direct Page Allocation and Copy/Remap/Write in kernel to perform page reclaim from Page Allocator and spray evil/crafted data to pages. Page Spray("DirtyPage") has multiple variants, and can be data-only attack.

Bibtex

@inproceedings{Guo2024TakeAS,
  title={Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation},
  author={Ziyi Guo and Dang K Le and Zhenpeng Lin and Kyle Zeng and Ruoyu Wang and Tiffany Bao and Yan Shoshitaishvili and Adam Doup'e and Xinyu Xing},
  booktitle = {33rd USENIX Security Symposium (USENIX Security 24)},
  year={2024},
}