Microsoft finds privilege escalation vulnerability in Huawei driver

Re:Microsoft finds privilege escalation vulnerability in Hua... by xenadu02 on Thursday April 04, 2019 @04:22PM (#19576697)

> Having been able to freely invoke IOCTL handlers of the driver from user-mode, we looked for other capabilities that can be abused. We found one: the driver provided a capability to map any physical page into user-mode with RW permissions. Invoking this handler allowed a code running with low privileges to read-write beyond the process boundaries—to other processes or even to kernel space. This, of course, means a full machine compromise.

Please, continue.

[ Parent | on HN ]

Re:Microsoft finds privilege escalation vulnerability in Hua... by monocasa on Thursday April 04, 2019 @04:31PM (#19576784)

Ok, I missed that part. Most people here are up in arms about the page mapping for the code injection.

But FWIW, it's a pretty common thing for shitty drivers. Here's one example: https://forum.xda-developers.com/showthread.php?t=2057818

[ Parent | on HN ]