Trend Micro Vision One Linux EDR: Kernel Module Function Hijacking via Exposed Function Memory Address

TrendMicro Vision One Linux EDR: Kernel Module Function Hijacking via Exposed Function Memory Address

This allows you to create another LKM that call the functions implemented by these Trend modules. This allows you to directly execute critical functions, such as: pic.twitter.com/LWasuuKrGl

— MatheuZ (@MatheuzSecurity) February 25, 2025