Re:VirtualBox E1000 Guest-to-Host Escape
by niklasb on Tuesday November 06, 2018 @09:19PM
(#18396685)
The bug is in the VirtualBox code that emulates an Intel E1000 device. There is no driver code involved.
[ Parent
| on HN ]
Re:VirtualBox E1000 Guest-to-Host Escape
by craftyguy on Tuesday November 06, 2018 @09:25PM
(#18396704)
Thanks.
> There is no driver code involved.
Yea I see that step #1 in the 'exploit algo' is to remove the e1000, I missed that earlier:
> An attacker unloads e1000.ko loaded by default in Linux guests and loads the exploit's LKM.