Overclock.net › Forums › Industry News › Software News › [eWEEK] Risk From Linux Kernel Hidden in Windows 10 Exposed at Black Hat
New Posts  All Forums:Forum Nav:

[eWEEK] Risk From Linux Kernel Hidden in Windows 10 Exposed at Black Hat

post #1 of 26
Thread Starter 
Quote:
A researcher exposes design and control flaws in Windows 10 versions that have the capability to run Linux.
LAS VEGAS—Embedded within some versions of the latest Windows 10 update is a capability to run Linux. Unfortunately, that capability has flaws, which Alex Ionescu, chief architect at Crowdstrike, detailed in a session at the Black Hat USA security conference here and referred to as the Linux kernel hidden in Windows 10.

In an interview with eWEEK, Ionescu provided additional detail on the issues he found and has already reported to Microsoft. The embedded Linux inside of Windows was first announced by Microsoft in March at the Build conference and bring some Ubuntu Linux capabilities to Microsoft's users.

Ionescu said he reported issues to Microsoft during the beta period and some have already been fixed. The larger issue, though, is that there is now a new potential attack surface that organizations need to know about and risks that need to be mitigated, he said.

"In some case, the Linux environment running in Windows is less secure because of compatibility issues," Ionescu said. "There are a number of ways that Windows applications could inject code, modify memory and add new threats to a Linux application running on Windows."

The modified Linux code in turn could then call Windows APIs and get access to system calls to perform malicious actions that might not be mitigated.

"So you have a two-headed beast that can do a little Linux and can also be used to attack the Windows side of the system," Ionescu said.

Source
post #2 of 26
So now Windows can have both Windows and Linux vulnerabilities? Niiiice.
post #3 of 26
Quote:
Originally Posted by Dyson Poindexter View Post

So now Windows can have both Windows and Linux vulnerabilities? Niiiice.

This should be an upgrade in Microsoft's book biggrin.gif
 
QUEEN OF BLADES
(15 items)
 
ASUS U6Sg
(15 items)
 
CPUMotherboardGraphicsRAM
I7 920 REV D0@4.2 HT Asus Rampage II Extreme CFX: ASUS R9 270X DCUII 6GB DDR3 XMP CL6 TRIDENT 
Hard DriveOptical DriveCoolingOS
Vertex 2 180 GB+RAID 0 2 * 1 TB SAMSUNG Sony Optiarc Labelflash Thermalright Venoumous X W7 X64 Ultimate RETAIL 
MonitorKeyboardPowerCase
Dell U2410 IPS Logitech Corsair CMPSU-850TX Antec 1200 
MouseMouse PadAudio
Logitech HAMA Xonar STX / Auzen Forte 
CPUMotherboardGraphicsRAM
XEON 5650X @4.45 GHz  Rampage III Formula PCGH CFX: ASUS R9 280X DCUII 16GB G-SKILL CL9@ 1643 MHz 
Hard DriveOptical DriveCoolingOS
1x 850 Pro 256 GB + 1xWD 500 GB + 2x3TB WD RED Plextor PX-L89OSA Thermalright VX W10 X64 Ultimate RETAIL 
MonitorKeyboardPowerCase
ACER B203W Razer Deathstalker Corsair CMPSU-750TX Antec 902 
MouseMouse PadAudio
Logitech G800S Logitech Gaming  Creative Titanium HD + FiiO E17 
CPUMotherboardGraphicsRAM
Intel Core 2 Duo : T8300 Asus U6000Sg Series Notebook NVIDIA 9300 GS 4GB Kingston CL4 
Hard DriveOptical DriveCoolingOS
Hitachi Ultrastar Asus POS Stock Asus with MX3 W7 x64 Ultimate RETAIL 
MonitorAudio
Asus 12.1 " LED Creative X-Fi EX54 
  hide details  
Reply
 
QUEEN OF BLADES
(15 items)
 
ASUS U6Sg
(15 items)
 
CPUMotherboardGraphicsRAM
I7 920 REV D0@4.2 HT Asus Rampage II Extreme CFX: ASUS R9 270X DCUII 6GB DDR3 XMP CL6 TRIDENT 
Hard DriveOptical DriveCoolingOS
Vertex 2 180 GB+RAID 0 2 * 1 TB SAMSUNG Sony Optiarc Labelflash Thermalright Venoumous X W7 X64 Ultimate RETAIL 
MonitorKeyboardPowerCase
Dell U2410 IPS Logitech Corsair CMPSU-850TX Antec 1200 
MouseMouse PadAudio
Logitech HAMA Xonar STX / Auzen Forte 
CPUMotherboardGraphicsRAM
XEON 5650X @4.45 GHz  Rampage III Formula PCGH CFX: ASUS R9 280X DCUII 16GB G-SKILL CL9@ 1643 MHz 
Hard DriveOptical DriveCoolingOS
1x 850 Pro 256 GB + 1xWD 500 GB + 2x3TB WD RED Plextor PX-L89OSA Thermalright VX W10 X64 Ultimate RETAIL 
MonitorKeyboardPowerCase
ACER B203W Razer Deathstalker Corsair CMPSU-750TX Antec 902 
MouseMouse PadAudio
Logitech G800S Logitech Gaming  Creative Titanium HD + FiiO E17 
CPUMotherboardGraphicsRAM
Intel Core 2 Duo : T8300 Asus U6000Sg Series Notebook NVIDIA 9300 GS 4GB Kingston CL4 
Hard DriveOptical DriveCoolingOS
Hitachi Ultrastar Asus POS Stock Asus with MX3 W7 x64 Ultimate RETAIL 
MonitorAudio
Asus 12.1 " LED Creative X-Fi EX54 
  hide details  
Reply
post #4 of 26
well, what to expect? At file level both has different permission system already, I also wonder about the file naming compatibility with Linux support upper lower case file as different while Window only support single case for file naming.
Survival Laptops
(15 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 2600k Dell XPS 15 Intel GMA3000 Hynx 8GB (unknown brands) 
RAMHard DriveHard DriveOS
Corsair 8GB Value Select WD Black Samsung PRO 850 SSD Windows 7 
KeyboardMouseAudio
Build In Laptop Logitech G700 Musiland 03 Dragon Edition 
  hide details  
Reply
Survival Laptops
(15 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 2600k Dell XPS 15 Intel GMA3000 Hynx 8GB (unknown brands) 
RAMHard DriveHard DriveOS
Corsair 8GB Value Select WD Black Samsung PRO 850 SSD Windows 7 
KeyboardMouseAudio
Build In Laptop Logitech G700 Musiland 03 Dragon Edition 
  hide details  
Reply
post #5 of 26
I would imagine your only vulnerable if you have "Windows Subsystem for Linux" enabled, or are you just vulnerable if you are on Version 1607?
Gaming PC
(10 items)
 
My Xeon
(12 items)
 
 
CPUMotherboardGraphicsRAM
Intel i7-6700k Gigabyte Z170X-Gaming 7 Gigabyte Gtx 970 G1 Corsair Vengeance LPX 16 GB 2666MHz 
Hard DriveHard DriveCoolingOS
Samsung Evo 850 500 GB Seagate 7200 RPM 2 TB Corsair H100i GTX Windows 10 Pro 
PowerCase
EVGA Supernova 1000 G2 Corsair Air 540 
  hide details  
Reply
Gaming PC
(10 items)
 
My Xeon
(12 items)
 
 
CPUMotherboardGraphicsRAM
Intel i7-6700k Gigabyte Z170X-Gaming 7 Gigabyte Gtx 970 G1 Corsair Vengeance LPX 16 GB 2666MHz 
Hard DriveHard DriveCoolingOS
Samsung Evo 850 500 GB Seagate 7200 RPM 2 TB Corsair H100i GTX Windows 10 Pro 
PowerCase
EVGA Supernova 1000 G2 Corsair Air 540 
  hide details  
Reply
post #6 of 26
What is the gain again? Running cellphone apps on your PC?
post #7 of 26
This is for running a linux like shell inside a windows environment. This is not the full linux kernel. AFAIK almost all of the heavy lifting is till done by the windows kernel.

From what I can gather, it seems possible for the windows side to inject malicious code into the linux environment and vice versa. For example, a piece of malware could bypass traditional wndows security checks by altering a running script running in the linux like terminal mode. Very interesting.
post #8 of 26
Why has Microsoft introduced Linux support in Windows?
3rd gaming setup
(19 items)
 
  
CPUMotherboardGraphicsRAM
G3258 ASRock H81 Pro BTC AMD Radeon RX 460 SK Hynix 
Hard DriveHard DriveHard DriveOptical Drive
Seagate Seagate Western Digital  Sony 
CoolingOSOSMonitor
Cooler Master TX3 EVO Windows 7 Ultimate Fedora Linux Samsung SyncMaster 
KeyboardPowerCaseMouse
Dell KB216 iBall Marathon 600W(Peak) Circle CC821 Dragon War Emera (3200DPI) 
Mouse PadAudioOther
Sims 4 Realtek Bose Companion 3 Series ii 
  hide details  
Reply
3rd gaming setup
(19 items)
 
  
CPUMotherboardGraphicsRAM
G3258 ASRock H81 Pro BTC AMD Radeon RX 460 SK Hynix 
Hard DriveHard DriveHard DriveOptical Drive
Seagate Seagate Western Digital  Sony 
CoolingOSOSMonitor
Cooler Master TX3 EVO Windows 7 Ultimate Fedora Linux Samsung SyncMaster 
KeyboardPowerCaseMouse
Dell KB216 iBall Marathon 600W(Peak) Circle CC821 Dragon War Emera (3200DPI) 
Mouse PadAudioOther
Sims 4 Realtek Bose Companion 3 Series ii 
  hide details  
Reply
post #9 of 26
Quote:
Originally Posted by sepiashimmer View Post

Why has Microsoft introduced Linux support in Windows?

to try and win over developers
lmao rig
(30 items)
 
lmao laptop
(20 items)
 
el servidor
(15 items)
 
CPUMotherboardGraphicsRAM
[AMD] Ryzen 5 1600X [Biostar] X370GT3 [Gigabyte] GTX 1080 windforce oc [G.Skill] Ripjaws V Series 16GB (2 x 8GB) DDR4 ... 
Hard DriveHard DriveHard DriveCooling
[Samsung] 960 evo m.2 250GB [Mushkin] eco2 512GB SSD [Mushkin] enhanced reactor 500GB SSD [Corsairl] h100i v2 
CoolingOSMonitorMonitor
[Noctua] nf-S12a pwm 120mm fan x 5 [M$] Winblows 10 pro fortified and telemetry free [AOC] i2367f 23" IPS [AOC] i2367f 23" IPS 
MonitorKeyboardPowerCase
[Dell] e2311h [Qisan] White Magicforce 68 w/ MX greens [Cougar] CMX 1000 [Fractal Design] Define C mini 
MouseMouse PadAudioAudio
[Logitech] g900 chaos spectrum [GGing] black extended mousepad [Onkyo] TX-SR313 receiver [KLH] Center and rear speakers 
AudioAudioAudioAudio
[Realistic] MC-1000 front speakers [Insignia] Rocketboost subwoofer Audio-Technica] QuietPoint ath-anc7b [Zalman] clip mic 
OtherOtherOtherOther
[Keycool] KC21 keypad w/ Gateron greens [Orico] USB 3.0 HDD dock bay [Orico] 7-port powered USB 3.0 Hub [Rosewill] 10-port powered USB 2.0 Hub 
OtherOther
[Belkin] 7-port powered USB 2.0 Hub [Phanteks] Cable extensions white 
CPUMotherboardGraphicsGraphics
[Intel] i7 6700HQ [Lenovo] ideapad y [Intel] HD 530 [AMD] Radeon R9 M375 4GB 
RAMRAMHard DriveHard Drive
[Samsung] 8GB DDR4 2133 [G.Skill] Ripjaws 8GB DDR4 2133 [Adata] Premier SP550 240GB SATA III M.2 SSD [Sandisk] X400 512GB SSD 
Optical DriveCoolingOSMonitor
[Asus] slim external DVD RW stock [M$] Winblows 10 fortified and telemetry free [Lenovo] 14" 1080p monitor 
KeyboardCaseMouseAudio
[Lenovo] integrated [Lenovo] y700 shell [Lenovo] touchpad integrated 
OtherOtherOtherOther
[Vortex] Poker II keyboard w/ MX Blacks [logitech] g303 daedalus apex mouse [WASD] v2 TKL w/ MX Clears (for work) [Dell] OEM optical mouse (for work) 
CPUMotherboardRAMHard Drive
[Intel] Xeon e5645 x 2 [Dell] Poweredge r710 OEM [Mushkin] 64GB (16x4GB) DDR3 ECC [Sandisk] Cruzer 2.0 16GB  
Hard DriveHard DriveHard DriveHard Drive
[Seagate] Constellation.2 1TB 7200 hdd x 2 [Sandisk] SSD Plus 240GB Sata III [Samsung] 850 EVO 250GB Sata III [WD] Red 1TB 5400 hdd 
Optical DriveCoolingOSPower
[Dell] OEM low-prof DVD RW [Dell] Poweredge r710 stock [VMWare] ESXi 6.5 [Dell] 870W Switching PSU x 2 
CaseOtherOther
[Dell] Poweredge r710 2U OEM all together* [Dell] r710 2.5" hdd bracket x 6 
  hide details  
Reply
lmao rig
(30 items)
 
lmao laptop
(20 items)
 
el servidor
(15 items)
 
CPUMotherboardGraphicsRAM
[AMD] Ryzen 5 1600X [Biostar] X370GT3 [Gigabyte] GTX 1080 windforce oc [G.Skill] Ripjaws V Series 16GB (2 x 8GB) DDR4 ... 
Hard DriveHard DriveHard DriveCooling
[Samsung] 960 evo m.2 250GB [Mushkin] eco2 512GB SSD [Mushkin] enhanced reactor 500GB SSD [Corsairl] h100i v2 
CoolingOSMonitorMonitor
[Noctua] nf-S12a pwm 120mm fan x 5 [M$] Winblows 10 pro fortified and telemetry free [AOC] i2367f 23" IPS [AOC] i2367f 23" IPS 
MonitorKeyboardPowerCase
[Dell] e2311h [Qisan] White Magicforce 68 w/ MX greens [Cougar] CMX 1000 [Fractal Design] Define C mini 
MouseMouse PadAudioAudio
[Logitech] g900 chaos spectrum [GGing] black extended mousepad [Onkyo] TX-SR313 receiver [KLH] Center and rear speakers 
AudioAudioAudioAudio
[Realistic] MC-1000 front speakers [Insignia] Rocketboost subwoofer Audio-Technica] QuietPoint ath-anc7b [Zalman] clip mic 
OtherOtherOtherOther
[Keycool] KC21 keypad w/ Gateron greens [Orico] USB 3.0 HDD dock bay [Orico] 7-port powered USB 3.0 Hub [Rosewill] 10-port powered USB 2.0 Hub 
OtherOther
[Belkin] 7-port powered USB 2.0 Hub [Phanteks] Cable extensions white 
CPUMotherboardGraphicsGraphics
[Intel] i7 6700HQ [Lenovo] ideapad y [Intel] HD 530 [AMD] Radeon R9 M375 4GB 
RAMRAMHard DriveHard Drive
[Samsung] 8GB DDR4 2133 [G.Skill] Ripjaws 8GB DDR4 2133 [Adata] Premier SP550 240GB SATA III M.2 SSD [Sandisk] X400 512GB SSD 
Optical DriveCoolingOSMonitor
[Asus] slim external DVD RW stock [M$] Winblows 10 fortified and telemetry free [Lenovo] 14" 1080p monitor 
KeyboardCaseMouseAudio
[Lenovo] integrated [Lenovo] y700 shell [Lenovo] touchpad integrated 
OtherOtherOtherOther
[Vortex] Poker II keyboard w/ MX Blacks [logitech] g303 daedalus apex mouse [WASD] v2 TKL w/ MX Clears (for work) [Dell] OEM optical mouse (for work) 
CPUMotherboardRAMHard Drive
[Intel] Xeon e5645 x 2 [Dell] Poweredge r710 OEM [Mushkin] 64GB (16x4GB) DDR3 ECC [Sandisk] Cruzer 2.0 16GB  
Hard DriveHard DriveHard DriveHard Drive
[Seagate] Constellation.2 1TB 7200 hdd x 2 [Sandisk] SSD Plus 240GB Sata III [Samsung] 850 EVO 250GB Sata III [WD] Red 1TB 5400 hdd 
Optical DriveCoolingOSPower
[Dell] OEM low-prof DVD RW [Dell] Poweredge r710 stock [VMWare] ESXi 6.5 [Dell] 870W Switching PSU x 2 
CaseOtherOther
[Dell] Poweredge r710 2U OEM all together* [Dell] r710 2.5" hdd bracket x 6 
  hide details  
Reply
post #10 of 26
Quote:
Originally Posted by CSCoder4ever View Post

to try and win over developers

Yea, and they won't be getting this one back.. Ever.
Nightrider
(17 items)
 
Commodore 64
(10 items)
 
 
CPUMotherboardGraphicsRAM
3930k x79 gd45 PLUS GTX Titan Crucial Ballistix Sport VLP  
Hard DriveHard DriveHard DriveCooling
HyperX 3k Intel 320 Seagate Barracuda Swifttech H220 
CoolingCoolingOSOS
Swifttech 220QP Corsair SP120 Windows 8.1 Pro Windows 10 Pro 
OSOSMonitorMonitor
Windows 7 Home Ubuntu 15.4 QNIX 2710 Catleap 2B 
Keyboard
Ducky - Cherry MX Red 
CPUMotherboardGraphicsRAM
3570k DZ77GA - 70K GTX670-DC2-4GD5  MV-3V4G3D/US 
Hard DriveCoolingOSOS
HyperX 3k CM 212 + Win 7 64 ubuntu 
PowerCase
Seventeam 850w modular CS-NT-ZERO-2  
  hide details  
Reply
Nightrider
(17 items)
 
Commodore 64
(10 items)
 
 
CPUMotherboardGraphicsRAM
3930k x79 gd45 PLUS GTX Titan Crucial Ballistix Sport VLP  
Hard DriveHard DriveHard DriveCooling
HyperX 3k Intel 320 Seagate Barracuda Swifttech H220 
CoolingCoolingOSOS
Swifttech 220QP Corsair SP120 Windows 8.1 Pro Windows 10 Pro 
OSOSMonitorMonitor
Windows 7 Home Ubuntu 15.4 QNIX 2710 Catleap 2B 
Keyboard
Ducky - Cherry MX Red 
CPUMotherboardGraphicsRAM
3570k DZ77GA - 70K GTX670-DC2-4GD5  MV-3V4G3D/US 
Hard DriveCoolingOSOS
HyperX 3k CM 212 + Win 7 64 ubuntu 
PowerCase
Seventeam 850w modular CS-NT-ZERO-2  
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Software News
Overclock.net › Forums › Industry News › Software News › [eWEEK] Risk From Linux Kernel Hidden in Windows 10 Exposed at Black Hat