
RowHammer Based-Exploit
RowHammer आधारित-एक्सप्लॉइट(sys_suid बैकडोर rowhammer का उपयोग करके) अभी और काम करने की ज़रूरत है... पता लगाएं कि चीज़ें ठीक से काम क्यों नहीं करतीं...
Current stage... Denial fails with the following stack trace...
UG: unable to handle kernel paging request at 0000000100000000
PGD 8000000006de3067 P4D 8000000006de3067 PUD 0
Oops: 0010 [#1] PTI
CPU: 0 PID: 63 Comm: a.out Not tainted 4.17.0 #2
RIP: 0010:0x100000000
RSP: 0018:ffffc900000efdd0 EFLAGS: 00010206
RAX: ffff880007771600 RBX: ffff880006dd9000 RCX: ffffea00001a1af0
RDX: 0000000100000000 RSI: ffffea00001a20d8 RDI: ffff880007771600
RBP: 0000000000100011 R08: ffffffff81a47d80 R09: ffff880007771600
R10: ffff880007771630 R11: 0000000000000000 R12: ffff880007b79000
R13: ffffc900000f4000 R14: ffff880007771710 R15: ffff880006dd9000
FS: 0000000002158880(0000) GS:ffffffff81a35000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000100000000 CR3: 0000000006dda000 CR4: 00000000000006b0
Call Trace:
? kmem_cache_alloc+0x57/0x5e
? prepare_creds+0x1a/0x44
? copy_creds+0x3c/0x77
? copy_process.part.100+0x28d/0x1009
? alloc_set_pte+0x16d/0x181
? finish_fault+0x4a/0x53
? _do_fork+0xab/0x1d9
? __set_current_blocked+0x1d/0x1f
? sigprocmask+0x55/0x59
? do_syscall_64+0x7b/0x89
? entry_SYSCALL_64_after_hwframe+0x44/0xa9
Code: Bad RIP value.
RIP: 0x100000000 RSP: ffffc900000efdd0
CR2: 0000000100000000
---[ end trace 84b4943b0c9a767e ]---
Kernel panic - not syncing: Fatal exception
Kernel Offset: disabled
Rebooting in 1 seconds..