The specific exploit payload for the POC relies on a su binary. The vuln is ambi... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

staticassertion 54 days ago | parent | context | favorite | on: Copy Fail

The specific exploit payload for the POC relies on a su binary. The vuln is ambivalent and other non-su paths will exist.

nromiun 54 days ago [–]

Of course, but it does not matter as the entire AF_ALG module is forbidden by SELinux anyway (on Android).

staticassertion 53 days ago | [–]

That's fine and a very separate reason why it would not be exploitable, also assuming that the module is not just compiled in since then loading it would be irrelevant.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact