Record · corpus.blog/posts/01a087da-943d-7380-85bd-09bae3a9620c

Kernel Exploitation Techniques: Turning The (Page) Tables

sam4k.com · published 7 May 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at sam4k.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 44
Words captured: 6,742

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://sam4k.com/linternals/

sam4k.com

Linternals: Exploring The mm Subsystem via mmap [0x01] Read at the source ↗

sam4k.com

Linternals: Introducing Memory Allocators & The Page Allocator Read at the source ↗

sam4k.com

https://elixir.bootlin.com/linux/v5.18.3/source/include/asm-generic/page.h

elixir.bootlin.com

https://docs.kernel.org/mm/page_tables.html

docs.kernel.org

https://www.researchgate.net/scientific-contributions/Hiroki-Kuzuno-2166786557

researchgate.net

https://www.researchgate.net/profile/Toshihiro-Yamauchi-2

researchgate.net

https://www.researchgate.net/figure/Overview-of-page-table-structure-Linux-x86-64-architecture-in-22_fig1_353593783

researchgate.net

https://cateee.net/lkddb/web-lkddb/PAGE_TABLE_ISOLATION.html

cateee.net

https://cateee.net/lkddb/web-lkddb/MITIGATION_PAGE_TABLE_ISOLATION.html

cateee.net

https://github.com/lorenzo-stoakes/linux-vm-notes/blob/master/sections/page-tables.md

github.com

https://powerofcommunity.net/poc2024/Pan%20Zhenpeng%20&%20Jheng%20Bing%20Jhong,%20GPUAF%20-%20Two%20ways%20of%20rooting%20All%20Qualcomm%20based%20Android%20phones.pdf

powerofcommunity.net

https://elixir.bootlin.com/linux/v6.11.5/source/include/linux/gfp.h

elixir.bootlin.com

https://lwn.net/Articles/619514/

lwn.net

https://i.blackhat.com/BH-US-24/Presentations/REVISED02-US24-Gong-The-Way-to-Android-Root-Wednesday.pdf

i.blackhat.com

https://web.archive.org/web/20250304082609/https://yanglingxi1993.github.io/dirty_pagetable/dirty_pagetable.html

web.archive.org

https://x.com/NVamous

x.com

https://phrack.org/issues/71/13

phrack.org

https://i.blackhat.com/BH-US-24/Presentations/US24-Qian-PageJack-A-Powerful-Exploit-Technique-With-Page-Level-UAF-Thursday.pdf

i.blackhat.com

https://ptr-yudai.hatenablog.com/entry/2023/12/08/093606

ptr-yudai.hatenablog.com

https://x.com/ptryudai

x.com

https://pwning.tech/nftables/

pwning.tech

https://x.com/notselwyn/

x.com

https://wiki.osdev.org/Paging

wiki.osdev.org

https://github.com/sam4k/linux-kernel-resources/tree/main/debugging

github.com

Linternals: The Kernel Virtual Address Space Read at the source ↗

sam4k.com

https://elixir.bootlin.com/linux/v6.11.5/source/arch/x86/include/asm/page_64_types.h

elixir.bootlin.com

SELinux bypasses Read at the source ↗

klecko.github.io

SELinux bypasses Read at the source ↗

klecko.github.io

https://soez.github.io/posts/CVE-2022-22265-Samsung-npu-driver/

soez.github.io

Kernel Exploitation Techniques: modprobe_path Read at the source ↗

sam4k.com

https://elixir.bootlin.com/linux/v6.11.5/source/include/linux/sched/task.h

elixir.bootlin.com

https://elixir.bootlin.com/linux/v6.11.5/source/include/linux/cred.h

elixir.bootlin.com

https://github.com/polygraphene/DirtyPipe-Android/blob/master/TECHNICAL-DETAILS.md

github.com

https://starlabs.sg/blog/2025/12-mali-cious-intent-exploiting-gpu-vulnerabilities-cve-2022-22706/

starlabs.sg

https://cateee.net/lkddb/web-lkddb/RANDOMIZE_BASE.html

cateee.net

https://cateee.net/lkddb/web-lkddb/PHYSICAL_START.html

cateee.net

https://cateee.net/lkddb/web-lkddb/PHYSICAL_ALIGN.html

cateee.net

https://www.samsungknox.com/en

samsungknox.com

https://www.longterm.io/samsung_rkp.html

longterm.io

https://x.com/sam4k1

x.com

A Quick Dive Into The Linux Kernel Page Allocator Read at the source ↗

syst3mfailure.io

https://bsky.app/profile/sam4k.com

bsky.app

https://infosec.exchange/@sam4k

infosec.exchange