PHASE 2 : ATTACK 위조 커널 객체 역참조 & 키네마틱 무력화 (SMAP 미적용)
[Step 1/3] 공격자가 유저 메모리에 위조 안전 객체(토크 650Nm, 레이더 0m)를 구성하고 소켓 UAF로 커널 포인터를 오염시킴.
USER SPACE (Ring 3 / EL0) Fake Object: 0x00405000 HOSTILE FAKE POLICY • torque: 650.0 Nm (Lethal!) • margin: 0.00 m (Blinded) • e_stop: 0 (PURGED) UNHARDENED MMU (SMAP=0) CR4.SMAP=0 | PAN=0 (Vulnerable) Data Protection: DISABLED Ring 0 Direct Read: ALLOWED KERNEL SPACE (Ring 0 / EL1) Locomotion Loop (Confused Deputy) Active Safety Policy • torque: 120.0 Nm • margin: 0.50 m • estop: 1 (Normal)
Execution Privilege
Ring 0 (Supervisor)
CR4.SMAP / PAN State
Disabled (0)
Joint Torque Applied
650.0 Nm (OVERLOAD)
Safety Status
RADAR / E-STOP PURGED