Registration Weakness in Linux Kernel's Binary formats

Hello,
The present document aims to demonstrate a design weakness found in the
handling of simply 
linked   lists   used   to   register   binary   formats   handled   by
Linux   kernel,   and   affects   all   the   kernel families
(2.0/2.2/2.4/2.6), allowing the insertion of infection modules in
kernel space that can be used by malicious users to create infection
tools, for example rootkits.

POC, details and proposed solution at:
English version: http://www.shellcode.com.ar/docz/binfmt-en.pdf
Spanish version: http://www.shellcode.com.ar/docz/binfmt-es.pdf

regards,
--
SHELLCODE Security Research TEAM
[email protected]
http://www.shellcode.com.ar


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Follow-Ups:
- Re: Registration Weakness in Linux Kernel's Binary formats
  - From: Chase Venters <[email protected]>
- Re: Registration Weakness in Linux Kernel's Binary formats
  - From: Chase Venters <[email protected]>

Prev by Date: Re: wpa supplicant/ipw3945, ESSID last char missing
Next by Date: Re: [patch] remove MNT_NOEXEC check for PROT_EXEC mmaps
Previous by thread: direct IO regression in 2.6.18
Next by thread: Re: Registration Weakness in Linux Kernel's Binary formats
Index(es):
- Date
- Thread

[Index of Archives] [Kernel Newbies] [Netfilter] [Bugtraq] [Photo] [Stuff] [Gimp] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Video 4 Linux] [Linux for the blind] [Linux Resources]