Improving Linux Heap Exploit Reliability with FreshSlices and CPU-Bullying

Exploits built around heap-based memory corruptions will never be perfectly reliable. There are multiple factors contributing to this, one being that the heap is shared among all tasks (user processes and kernel threads) running on a machine. Thus, the task running the exploit cannot exercise perfect control over it. Much has already been written about the art of shaping the kernel heap and…