Submit #1082: Linux kernel concurrency UAF in vt_do_kdgkb_ioctlinfo

TitleLinux kernel concurrency UAF in vt_do_kdgkb_ioctl
DescriptionThe developers recently discovered a uaf read in vt_do_kdgkb_ioctl from linux kernel version 3.4 to the latest version (v5.9 for now). The root cause of this vulnerability is that there exits a race in KDGKBSENT and KDSKBSENT.
Source⚠️ https://seclists.org/oss-sec/2020/q4/63
User
 CSieberg (UID 13359)
Submission10/19/2020 10:27 (6 years ago)
Moderation10/19/2020 11:58 (2 hours later)
StatusAccepted
VulDB entry162832 [Linux Kernel up to 5.9 KDGKBSENT/KDSKBSENT vt_do_kdgkb_ioctl race condition]
Points17

Interested in the pricing of exploits?

See the underground prices here!