This writeup was originally posted on my github Description Not sure exactly what the module does, but it's a misc device that does things with structs, arrays, linked lists and stuff. The vulnerability We have the following relevant code excerpts: #define MAX_CONSUMERS 255 struct csaw_buf { unsigned long consumers[MAX_CONSUMERS]; // [1]…
Read More