{"uuid": "1ba99c2d-efe7-4d6f-b1bc-3b8b650d60e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2017-5123", "type": "seen", "source": "https://infosec.exchange/users/andersonc0d3/statuses/117197828727921773", "content": "I discuss Linux kernel exception handling in my training\u2014specifically the mechanism that allows the kernel to trigger page faults at specific locations and handle them gracefully. This is why copy_from_user(), copy_to_user(), and other related functions don't cause a kernel oops when dealing with invalid addresses.\nI abuse this mechanism in a vulnerability that leads to an arbitrary read to bypass KASLR during my Linux kernel exploitation training. I had played with it several times, but I had never read the official documentation until I came across it recently while looking for well-written material to send to the class. This mechanism has also been abused in other exploits, such as the one below.\nKernel level exception handling in Linuxhttps://www.kernel.org/doc/Documentation/x86/exception-tables.txt\nExploiting CVE-2017-5123https://reverse.put.as/2017/11/07/exploiting-cve-2017-5123/", "creation_timestamp": "2026-09-01T21:09:08.371853Z"}