skip to content
nosiaht
home | blog | learn | talks | papers | contact
~/learn/pwn/modern-kernel-exploit/19-refcount-overflow locked

<-- modern kernel exploitation

Chapter 19 - "Crash it till you make it": refcount overflow from a NULL deref

lesson 22 of 31 · locked

Part V - User Space Mapping Attack

this lesson is locked

Enter the passphrase to read this lesson. Nothing readable is stored in the page, so the passphrase is the only way to open it.

$ open archive

decrypting lesson

← previousChapter 18 - CFI, and a challenge built to break ROPnext →Chapter 20 - setxattr × FUSE: a universal heap spray

original work: Cherie-Anne Lee (@kaligula_armblessed) · GCC 2025, Taiwan

<-- back to contents

<-- home © 2026 sondt / Thai Son Dinh
NORMAL ~/learn/pwn/modern-kernel-exploit/19-refcount-overflow jk scroll · du half page · gG top/end · q back