May CSides Security Meet

### Walkthrough of an N-day Android GPU driver vulnerability

ARM Mali GPUs are one of the most commonly used graphics processors in mobile SoCs. They can be found in many Android smartphones running Google Tensor, Samsung Exynos, HiSilicon Kirin and Mediatek chips.

This talk discusses a vulnerability in the ARM Mali GPU kernel driver for Android. The bug, which was publicly reported several years ago, acts as an interesting case study of how misunderstandings of Linux kernel APIs can lead to exploitable vulnerabilities.

In this talk, Angus gives an overview of key Linux kernel and GPU driver concepts, discusses the vulnerability and how it works, and walks through a public proof-of-concept exploit.
Angus
Angus is a vulnerability researcher at InfoSect. At work, he is well known for giving talks that go way over time and contain unnecessary amounts of detail. Outside of work, Angus enjoys learning new (usually useless) skills, attempting (and forever failing) to win CTFs, cooking (hopefully) tasty food, and is known to be overly competitive when playing (video|board|role-playing|war)games with his friends.

General Info:
CSides Monthly Security Meetups provide an opportunity to listen to and share security research within the Canberra region. The meeting occurs normally on the 2nd Friday of every month. Each meetup consists of 1-2 talks of around 30 mins each. Talks start at 6pm and are followed by some socialising at a local pub. New attendees are welcome, just come along! (There are no entry fees, and no tickets to book) The talks at CSides are technical. CSides welcomes new and interesting speakers to present - the topic will be on a technical or security issue. As a speaker you can be an expert, a student, someone learning a new area or maybe a regular speaker on the conference circuit, but we also love to have new and occasional speakers. Please contact one of the organisers below if you are interested in speaking. You are very welcome to propose running activites other than talks, such as hands-on workshops, an infosec quiz or something else relevant to our techie audience!