The Modprobe Path Technique

In this post, I want to explore another technique to exploit a buffer overflow in the Linux kernel. In a previous post i used the functions commit_creds(prepare_kernel_creds(0)) to elevate privileges to root. In this post, I want to demonstrate another way that involves overwriting the symbol modprobe_path in the kernel. This was swiftly mentioned in my previous post in a section called KPTI…