New Linux Kernel Exploit Technique ‘SLUBStick’ Discovered by Researchers

Cybersecurity researchers have shed light on a novel Linux kernel exploitation technique dubbed SLUBStick that could be exploited to elevate a limited heap vulnerability to an arbitrary memory read-and-write primitive.
« Initially, it exploits a timing side-channel of the allocator to perform a cross-cache attack reliably, » a group of academics from the Graz University of Technology said [PDF]. « 

Cybersecurity researchers have shed light on a novel Linux kernel exploitation technique dubbed SLUBStick that could be exploited to elevate a limited heap vulnerability to an arbitrary memory read-and-write primitive.
« Initially, it exploits a timing side-channel of the allocator to perform a cross-cache attack reliably, » a group of academics from the Graz University of Technology said [PDF]. «