Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/rooting-ubuntu-by-accident-and-samsung-kernel-bugs.html
We are back for the first 2022 binary episode, and its all kernel. Obtaining root through an hours long exploit process on Ubuntu thanks to an invalid free, use-after-free in XNU due to bad locking, and some terrible code in Samsung S20 DSP kernel driver with multiple integer overflows.
[00:00:42] Getting root on Ubuntu through wishful thinking
[00:19:21] XNU: heap-use-after-free in inm_merge
[00:29:42] Kernel LPE in the Vision DSP Kernel Driver [CVE-2021-25467]
[00:34:34] Kernel LPE in the Vision DSP Kernel Driver's ELF Linker [CVE-2021-25475]
[00:37:16] Linux Heap Exploitation - Part 3
[00:38:37] PS4 CCP Crypto Bug
The DAY[0] Podcast episodes are streamed live on Twitch (@dayzerosec) twice a week:
The Video archive can be found on our Youtube channel: https://www.youtube.com/c/dayzerosec
You can also join our discord: https://discord.gg/daTxTK9
Or follow us on Twitter (@dayzerosec) to know when new releases are coming.
