Colorful Vulnerabilities - How Changing The Colors Of Your Keyboard Might Lead To Privilege Escalation

No ratings

Presented at Nullcon Berlin 2023 by

Eran Shimony

Tal Lossos

Have you ever felt excited about using a brand-new gaming keyboard? Have you dreamed of how you can increase your actions per minute while having many cool bright colors? So far, so good, but what about the software that interacts with it? Often we do not think about the repercussions of the peripheral devices we use, which might be a problem. In this session, we will outline our research process - analyzing and investigating Razer's Linux kernel module, followed by finding several 0-day bugs (CVE-2022-29021, CVE-2022-29022, CVE-2022-29023) that are oddly determined by the number of RGB colors you have affecting the kernel itself with a live demonstration of exploiting the bugs. Lastly, we will examine and review modern kernel mitigation that reduces the severity of kernel buffer overflow bugs, show its implementation history with examples, and discuss how developers and attackers might approach Linux kernel bug hunting in the future.