Scavenger: Misuse Error Handling Leading to Qemu/KVM Escape
Error handling code is used extensively in hypervisors, which is designed to capture unexpected behaviors and avoid crashing the vm, such as invalid inputs from guest users and insufficient memory. However, we find that incorrect use of error handling code or missing error propagation can lead to security problems such as privilege escalation. In this briefing, we demonstrate how to achieve a full guest-to-host escape exploitation through a misuse error handling code.....
By:
Xingwei Lin, Gaoning Pan, Jiashui Wang, Chunming Wu, Xinlei Ying Ying
Full Abstract & Presentation Materials:
https://www.blackhat.com/asia-21/brie...
![[Non English] 1.7 Khmer Language](https://images.videosashka.com/watch/1IHVRDyjUKs)
