Breaking Android Kernel Isolation and Rooting with ARM MMU Features

Explore a groundbreaking rooting solution called ReVent in this 35-minute Black Hat conference talk. Delve into the details of a Use-After-Free vulnerability stemming from a race condition that affects all Android devices running the 3.18 Linux kernel. Learn how this vulnerability can be exploited by any untrusted application to break Android kernel isolation. Discover the intricacies of ARM MMU features and their role in compromising device security. Gain insights from security experts Yong Wang, Chengming Yang, Baozeng Ding, and Yang Song as they present their findings on breaking Android's kernel isolation mechanisms.

KSMA: Breaking Android Kernel Isolation and Rooting with ARM MMU Features