Explore the world
of Cybersecurity

64 bytes and a ROP chain – A journey through nftables – Part 1

Davide Ornaghi 02 April 2024

The purpose of this article is to dive into the process of vulnerability research in the Linux kernel through my experience that led to the finding of CVE-2023-0179 and a fully functional Local Privilege Escalation (LPE). By the end of this post, the reader should be more comfortable interacting with the nftables component and approaching the new mitigations encountered while exploiting the kernel stack from the network context.