USENIX Security2017
Adaptive Android Kernel Live Patching
Yue Chen, Yulong Zhang, Zhi Wang, Liangzhao Xia, Chenfu Bao, Tao Wei
60 citations
Abstract
Recent Vulnerabilities with Great Impact • CVE-2015-3636 (PingPong Root) -The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service. • CVE-2015-1805 (used in KingRoot) -The pipe_read and pipe_write implementations in kernel before 3.16 allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application. -A known issue in the upstream Linux kernel that was fixed in April 2014 but wasn't called out as a security fix and assigned CVE-2015-1805 until February 2, 2015.