Today looking into one CVE I bumped into this nice description about perspectives on single core vice multi core race conditions and using existing frameworks to accomplish the task. Sebastian Krahmer who has come up with a POC code for CVE-2011-0727 where he describes using cpu cores to simplify the race condition. Mr. Krahmer proves his description of his previous race condition using pppd and how there is some tuning involved with different cpu speeds. This race wins by beating the scheduler on a single core system. Now looking at the POC code for multi core systems I am left wondering what other exploits that can be simplified that are not currently known where the multi core systems makes this a trivial task.

This entry was posted on Wednesday, April 6th, 2011 at 1:23 pm and is filed under race conditions. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.