CVE-2010-4258: Turning denial-of-service into privilege escalation

https://blog.nelhage.com/2010/12/cve-2010-4258-from-dos-to-privesc/CVE-2010-4258: Turning denial-of-service into privilege escalation

Dan Rosenberg recently released a privilege escalation bug for Linux, based on three different kernel vulnerabilities I reported recently. This post is about CVE-2010-4258, the most interesting of them, and, as Dan writes, the reason he wrote the exploit in the first place. In it, I’m going to do a brief tour of the various kernel features that collided to make this bug possible, and explain how they combine to turn an otherwise-boring oops into privilege escalation.

2010-12-10T12:02:11Zhttps://blog.nelhage.com/post/Nelson ElhageRecent content in Posts on Made of BugsPosts on Made of Bugs2026-09-22T20:07:05Zrss20false60Nelson Elhage

nelson-elhage

0"5b2ae9eec2e293572f6ae5a000bd0161-ssl-df"200utf-8