Qualcomm Adreno GPU UAF rooting GPUAF (CVE-2024-23380)

Aynı bug/CVE: bkz. canonical CVE-2024-23380 KGSL VBO mapping-race notu (GPUAF / Android root).

Mechanism

Bu not, CVE-2024-23380 Adreno KGSL VBO bind/unbind race'inin (page-level UAF -> GPUAF -> Android root) bir kopyasıdır. Tam mekanizma için bkz. CVE-2024-23380: Qualcomm Adreno GPU KGSL VBO mapping race condition.

Walkthrough

Tam walkthrough canonical not'ta: CVE-2024-23380: Qualcomm Adreno GPU KGSL VBO mapping race condition.

References

• A Technical Deep Dive into CVE-2024-23380 — SIT-CyberSecurity
• The Way to Android Root: Exploiting Your GPU on Smartphone — Black Hat USA 2024 (PDF)
• GPUAF: Two Methods to Root Qualcomm-Based Android Phones — GBHackers