News for hackers. Stuff that matters.

A comment on Microsoft finds privilege escalation vulnerability in Huawei driver. Parent comment

Re:Microsoft finds privilege escalation vulnerability in Hua... by rujuladanh on Thursday April 04, 2019 @09:24AM (#19571973)
The article is about a driver that allows to map any physical page.
[ Parent | on HN ]
Re:Microsoft finds privilege escalation vulnerability in Hua... by monocasa on Thursday April 04, 2019 @02:48PM (#19575767)
That majority isn't.

And while there's better ways to handle it, and it wouldn't pass a design review of mine, it's pretty common to make a driver specific /dev/mem equivalent. For isntance https://forum.xda-developers.com/showthread.php?t=2057818

[ Parent | on HN ]
Re:Microsoft finds privilege escalation vulnerability in Hua... by rujuladanh on Thursday April 04, 2019 @05:19PM (#19577232)
I am not sure what you are trying to say.

Any driver for a multiuser OS that essentially bypasses protection mechanisms by the kernel for non-root users is broken, period.

There is no argument about it.

[ Parent | on HN ]