Organizer
Partner Company
Exploiting cross table object reference in Linux Netfilter table module
Bien Pham, Howard Nguyen
Abstract
Netfilter is a framework provided by the Linux kernel that allows various networking-related operations to be implemented in the form of customized handlers. One of the modules is Netfilter tables (nf_tables), which replaces the legacy iptables in configuring networking rules. This talk explains how Netfilter tables works in detail, how to communicate with the module using Netlink, and how our team found and exploited a bug in the module at Pwn2Own Vancouver 2022, as well as reviewing the recent patches for the bug, which also fixed other similar patterns.
Speaker Info
Bien Pham
Name: Bien Pham Nguyen Ngoc
Twitter handle: @bienpnn
Currently a security engineer of Sea Ltd Security Team. I'm interested in exploiting C/C++ native applications, as well as the Linux kernel and IoT hardware. First known publicly for exploiting RCE in Valve's games such as Counter-Strike: Global Offensive. Recently I participated in Pwn2Own Austin 2021 in Router category, and Pwn2Own Vancouver 2022 in Linux LPE category.
Howard Nguyen
Name: Howard Nguyen
Twitter handle: @ngtrh1eu
Howard Nguyen is an application security engineer by day and a security researcher by night with strong interests in browser vulnerability research and exploitation. As someone who loves the thrills and spills of finding and leveraging vulnerabilities in the Linux kernel, he recently participated in Pwn2Own Vancouver 2022 in the Linux LPE category with Team Orca of Sea Security