Hi there, May I ask you a simple question? :P. “Whether or not can an user fetch memory page that is released by the kernel?”. Do you have your quick answer in mind? Well, the answer is “Yes”. We will talk about that in this post (3.18 kernel for this...
When I spend time exploiting the Linux kernel, I indeed get some tiny pieces of the entire picture about how the Linux memory management work. Of course, it seems enough for some naive heap shaping and spraying, but also confuse me when things get deeper.