2026-07-20T15:07:58Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:3063 2024-03-06T10:28:47Z ddc:004 open_access

Hijacking the Linux Kernel Prochazka, Boris Vojnar, Tomas Drahansky, Martin Linux kernel hacking rootkit In this paper, a new method of hijacking the Linux kernel is presented. It is based on analysing the Linux system call handler, where a proper set of instructions is subsequently replaced by a jump to a different function. The ability to change the execution flow in the middle of an existing function represents a unique approach in Linux kernel hacking. The attack is applicable to all kernels from the 2.6 series on the Intel architecture. Due to this, rootkits based on this kind of technique represent a high risk for Linux administrators. Schloss Dagstuhl – Leibniz-Zentrum für Informatik Boris Prochazka and Tomas Vojnar and Martin Drahansky 2011 Is Part Of OASIcs, Volume 16, Sixth Doctoral Workshop on Mathematical and Engineering Methods in Computer Science (MEMICS'10) -- Selected Papers (2011) InProceedings Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/OASIcs.MEMICS.2010.85 urn:nbn:de:0030-drops-30635 https://drops.dagstuhl.de/entities/document/10.4230/OASIcs.MEMICS.2010.85 eng https://creativecommons.org/licenses/by-nc-nd/3.0/legalcode