Ret2page - The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache

This advanced talk introduces Ret2page, an exploitation technique for use-after-free vulnerabilities in the dedicated cache. It covers allocator manipulation, physical page reuse, mitigation bypasses, arbitrary kernel memory access, and Android rooting.