Nullcon Berlin 2023 | How Changing The Colors Of Your Keyboard Might Lead To Privilege Escalation

This talk explores the interaction between gaming keyboards and the Linux kernel, highlighting the often-overlooked consequences of peripheral devices. The speaker outlines their research process and shares findings on several zero-day vulnerabilities (CVE-2022-29021, CVE-2022-29022, CVE-2022-29023) linked to RGB configuration, supported by a live demonstration of exploiting these flaws. Additionally, the session reviews modern kernel mitigations aimed at reducing the impact of buffer overflow vulnerabilities and discusses potential future directions for Linux kernel bug hunting by both developers and attackers.