Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← back | CVE Intelligence

CVE-2022-42703

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2022-42703.

Coverage Span
2022-12-08
Reports
1 related reports

Associated Reports & Timeline

1.
Exploiting CVE-2022-42703 - Bringing back the stack attack
projectzero.google | vulnerability | | original ↗ | #exploit | #vulnerability | #security-research
This blog post details an exploit for CVE-2022-42703 (P0 issue 2351 - Fixed 5 September 2022), a bug Jann Horn found in the Linux kernel's memory management (MM) subsystem that leads to a use-after-free on struct anon_vma. As the bug is very complex (I certainly struggle to understand it!), a future blog post will describe the bug in full. For the time being, the issue tracker entry, this LWN article explaining what an anon_vma is and the commit that introduced the bug are great resources in order to gain additional context.