LPE for CVE-2023-0179 is live! Compatibility with other versions should be just a matter of offsets. It was nice not having to deal with stack offset randomization.
https://t.co/DvqIyXaerr
While testing and fixing a couple of NPDs in nftables, I found that reusing the subsystem after crashing triggers a UAF read on the previously freed task_struct when reacquiring the commit mutex, maybe worth a look?
https://t.co/Nr4ZoeRbsK
I've written my first blog post on exploiting the Linux kernel, with bonus digressions on internals and rabbit holes.
Hope you enjoy the fancy graphics!
https://t.co/8yZ0yrjCCP
https://t.co/AmMjrvIKF2
Exciting news! 🚀 Just dropped my blogpost unveiling the universal Linux kernel LPE PoC for CVE-2024-1086 (working on v5.14 - v6.7) used for pwning Debian, Ubuntu, and KernelCTF Mitigation instances, including novel techniques like Dirty Pagedirectory 🧵
https://t.co/zFimVzjgYB
CVE-2023-3338 represents a series of issues I found in the Linux DECnet Layer (a 20-year-old protocol) that caused it to be removed from all LTS releases, the most obvious one being this NPD
https://t.co/Jao0NkzRX2