# Corrupting the ARM Exception Vector Table

DevFeed: [Corrupting the ARM Exception Vector Table](<https://devfeed.tech/articles/corrupting-the-arm-exception-vector-table-39695.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2014/04/30/corrupting-arm-evt/>)

Author: Amat "acez" Cama

Published: 2014-05-01T04:01:00Z

Content type: article

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Arm](<https://devfeed.tech/topics/arm.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Linux Kernel](<https://devfeed.tech/topics/linux-kernel.md>), [Exception](<https://devfeed.tech/topics/exception.md>), [Assembly](<https://devfeed.tech/topics/assembly.md>), [cpu](<https://devfeed.tech/topics/cpu.md>)

Tags: [arm](<https://devfeed.tech/tags/arm.md>), [assembly](<https://devfeed.tech/tags/assembly.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [exception](<https://devfeed.tech/tags/exception.md>), [exceptions](<https://devfeed.tech/tags/exceptions.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [linux-kernel](<https://devfeed.tech/tags/linux-kernel.md>)

## AI overview

This article explains how the ARM Exception Vector Table can be abused during Linux kernel exploitation when an attacker has a write-what-where primitive. It covers the table's relationship to exception handlers, processor modes, and banked registers, and introduces local and remote exploit scenarios.

## Source excerpt

Introduction A few months ago, I was writing a Linux kernel exploitation challenge on ARM in an attempt to learn about kernel exploitation and I thought I'd explore things a little. I chose the ARM architecture mainly because I thought it would be fun to look at. This article is ...