ulisses

Mathematician gone InfoSec. Interested in the Linux kernel, vulnerability research & reverse engineering.

[ulisses @foolisses]

Just published a post on exploiting CVE-2024-0582, a vulnerability in the Linux kernel that remained unpatched in Ubuntu for over two months. Hope you enjoy it!

https://t.co/yG7fG3pImw

[sam4k @sam4k1]

here's a technical write-up i wrote on one of the kernel bugs we've found :)

[Gyorgy Miru (Gym) @gymiru]

CFP is open for SAFACon Party! This is your chance to share your coolest research at an exclusive, invite-only conference. Sunshine, spanish vibes, food, drinks, party, heated VR debates are guaranteed. All your favorite VR folks will be there, so should you. Ping me for details

[SinSinology @SinSinology]

🤌🔥 "Build a Fake Phone, Find Real Bugs
Qualcomm GPU Emulation and Fuzzing with LibAFL QEMU"
https://t.co/6cYo6nj32r

[SAFA Team @SAFATeamApS]

It's official - #SAFACon 2026 will be held on the 8th of May in a secret location around Barcelona. Invites coming out from January, stay tuned for more info...

[SAFA Team @SAFATeamApS]

Our team discovered CVE-2025-13032, an LPE in the Avast sandbox driver! Read the story of a SYSTEM token heist involving a break-in and escape from the antivirus sandbox. Full details: https://t.co/UzxwvrT3C1

#CVE #LPE #Antivirus #KernelExploit #WindowsSecurity

[Faith 🇧🇩🇦🇺 @farazsth98]

Honey wake up, a new alternative to userfaultfd / FUSE for lengthening race windows just dropped!!

https://t.co/c7MpyDoEpc

[Dmitry Vyukov @dvyukov]

First mention of x86 memory tagging (aka MTE) by both Intel and AMD (codename ChkTag):
https://t.co/puaBEmfAGx

https://t.co/UVIsSZ9Twc

🤘🤘🤘

[Crusaders of Rust @cor_ctf]

Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130)

https://t.co/Cbk9MBo91v

Cheers to @u1f383 for finding these CVEs + the OffensiveCon talk from gteissier & @laomaiweng for inspiration!

[Alexander Popov @a13xp0p0v]

My new article: "Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel"⚡️

I tell a bug collision story and introduce my pet project kernel-hack-drill, which helped me to exploit the hard bug that received @PwnieAwards 2025

https://t.co/0DJzCJYEfm

[Andrey Konovalov @andreyknvl]

Documented instructions for setting up KGDB on Pixel 8.

Including getting kernel log over UART via USB-Cereal, building/flashing custom kernel, breaking into KGDB via /proc/sysrq-trigger or by sending SysRq-G over serial, dealing with watchdogs, etc.

https://t.co/vb4mgLDJrl

[sam4k @sam4k1]

with offensivecon around the corner, i figured id write another post on linux kernel exploitation techniques - this time i cover the world of page table exploitation! enjoy 🤓

https://t.co/dqW9eMJkVI

[ulisses @foolisses]

A great overview of the Linux Page Allocator 💯
https://t.co/F4ZbSS7y1H

[Crusaders of Rust @cor_ctf]

We are back😎 Say hello to our kernelCTF submission for CVE-2025-37752🩸

Who would have thought you could pwn a kernel with just a 0x0000 written 262636 bytes out of bounds?

Read the full writeup at: https://t.co/GkpCjamlaZ 👀

[ulisses @foolisses]

@pinkflawd @zlowram_ Not exactly a Linux OS bible, but I really like Linux Kernel Programming by Kaiwan N Billimoria. Imho it's a great resource to understand the main building blocks of the OS without getting lost, and it reads very well.

[sam4k @sam4k1]

ngl gang i might have got a bit lost in the sauce with this one, but if you're curious about how mmap() is implemented, check out part 2 of my memory management linternals series

https://t.co/Wr9X60zW1I

[Kuzey Arda Bulut @kuzeyardabulut]

🚨 New Blog Post: Exploiting CVE-2024-0582 via the Dirty Page Table Method!

Discover how dangling pages can corrupt Page Table Entries (PTEs) and redirect user-space memory to kernel-space.

Read the full analysis: https://t.co/v0ftRqYkZB

#ExploitDevelopment #KernelSecurity

[Alexander Popov @a13xp0p0v]

Slides of my talk at #Zer0Con2025!

⚡️ Kernel-Hack-Drill: Environment For Developing Linux Kernel Exploits ⚡️

I presented the kernel-hack-drill open-source project and showed how it helped me to exploit CVE-2024-50264 in the Linux kernel.

Enjoy!
https://t.co/84DqT4rdvm

[Brad Spengler @spendergrsec]

Just saw it mentioned on LWN, handy site for checking which distros enable a certain config option: https://t.co/vIJhYoqSXQ... Just replace UTS_RELEASE with whatever config option name minus CONFIG_, for example: https://t.co/L8QGPAYwGF...

[Attila Szasz @4ttil4sz1a]

CVE-2025-0927 details here!

https://t.co/z9amcuNjKP

[Anderson Nascimento @andersonc0d3]

The Linux Memory Manager preorder and early access book

https://t.co/5oqqDMZ5Vm