Post #2142676
2026-04-29 22:13 UTC
@q3k would this primitive also work for overwriting code of an already-running privileged process?
Replies (2)
-
@q3k@social.hackerspace.pl 2026-04-29 23:03
@wolf480pl Yes.
-
@implr@social.hackerspace.pl 2026-04-29 23:04
@wolf480pl @q3k If you managed to get the page swapped out first (with an oom condition or sth), then probably yes, but idk how the page cache interacts with .text mappings to be sure. If that is possible, then there should be plenty of tasty targets in pid1 - systemd is a pretty thicc binary