Linux Page Cache Vulnerability via TC Pedit: A New Exploit
Discover the Linux TC Pedit page cache exploit enabling root access. Learn about the vulnerability and its fix.
A vulnerability in the Linux kernel's TC packet editor allows page cache corruption, enabling root access in under a second. Dubbed "Dirty Pedit," this exploit leverages a u32 integer wraparound in tcf_pedit_act(), causing skb_ensure_writable() to inadequately protect bytes. This results in direct writes to page-cache-backed skb fragments.