Common vulnerabilities in operating system kernels. An 'overflow' or 'wrap-around' occurs when the result of a certificate operation exceeds the range representable by its output type. Core harms include: out-of-bounds access, using an overflowed minimum value as an index or offset to access data outside memory regions; buffer overflow, where overflow during buffer size calculation leads to undersized allocation and subsequent write overflow; bypassing security checks, where overflow invalidates boundary checks; reference count corruption, causing incorrect reference counts for kernel objects, potentially leading to use-after-free (UAF); and privilege escalation, where attackers ultimately exploit these vulnerabilities for local privilege escalation or sandbox escape.
A common vulnerability in operating system kernels. An "overflow" or "wraparound" occurs when the result of an arithmetic operation exceeds the range representable by its output type.
Core Impact:
Out-of-bounds access: using the overflowed minimum value as an index or offset to read or write data beyond the intended memory region.
Buffer overflow: an overflow during buffer size calculation causes undersized allocation, which is then overrun when data is written into it.
Security check bypass: using overflow to defeat boundary checks.
Reference count corruption: causing incorrect reference counts on kernel objects, potentially leading to UAF (use-after-free).
Privilege escalation: attackers can ultimately exploit the above vulnerabilities to achieve local privilege escalation or sandbox escape.
A common vulnerability in operating system kernels. An "overflow" or "wraparound" occurs when the result of an arithmetic operation exceeds the range representable by its output type.
Core Impact: