Linux Kernel Exploitation

pawnyable.cafeDouble Fetch (LK03 - Dexter)

Linux Kernel ExploitationCVE-2022-4543 > Experimenting with EntryBleed - A Universal KASLR Bypass against KPTI on Linux

Trampoline region trong KPTI user page table bị cached vào TLB, cho phép dò KASLR offset từ userspace qua prefetch side-channel.

Linux Kernel ExploitationGetting Started With Linux Kernel Exploitation