ll

Red Team & Linux

[Project Zero Bugs @ProjectZeroBugs]

PowerVR: virtual/physical unit confusion in DevmemIntComputeVirtualIndicesFromLogical() leads to OOB kernel write https://t.co/odkpaqzx1C

[Kuzey Arda Bulut @kuzeyardabulut]

🐛New post: Exploiting CVE-2024-1065 via the Page Cache!

A strategy for physical-page UAFs in MIGRATE_MOVABLE, where Dirty Pagetable and Dirty Cred don't apply.

Demonstrated on the Mali GPU UAF found by Project Zero.

https://t.co/2QmH3TFFtt
#ExploitDevelopment #KernelSecurity

[ll @llfamsec]

Verified on a top cloud provider. Rest to share after fixes😃

[Azrael @azraelxuemo]

NVIDIA’s probably pretty Pwn2Own-friendly. You never have to stress about your bugs getting patched before the contest.🤣We @llfamsec sent them a few vulnerabilities last month. Three separate full-chain container escapes in the NV Container Toolkit — still haven’t been patched.

[sam4k @sam4k1]

here's a technical write-up i wrote on one of the kernel bugs we've found :)

[Minions @Minions]

here's looking at you, buddies. See Minions & Monsters, only in theaters July 1.

[ll @llfamsec]

It’s not easy to keep grinding on a side project after work🫠

[Qualys @qualys]

Qualys Threat Research Unit (TRU) discovered CrackArmor: 9 AppArmor flaws impacting 12M+ Linux systems since 2017. These enable root access & container breakouts.

Patch your kernels now! Details: https://t.co/frznetHzYJ

#Linux #Cybersecurity #CrackArmor"

[Azrael @azraelxuemo]

RCE video demo of cve-2026-24747

[V4bel @v4bel]

@_qwerty_po and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249)
And I’ve just published the write-up: https://t.co/PLX5PnshLH

A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it.

PoC 💻: root on Ubuntu 24.04

[h0mbre @h0mbre_]

this is so insane. kCTF has a first-come-first-serve policy when it comes to 0day bounties when an instance releases. this team hand crafted a proof of work solver with avx-512 instructions to beat everyone else with an 0day to the flag: https://t.co/98hBSAFLum

[Slava Moskvin | Path Cybersec @slava_moskvin_]

My network fuzzer net-shredder found a remote NULL pointer dereference in the Linux kernel's SMB server (ksmbd) https://t.co/ej2jdbgQTn

[Slava Moskvin | Path Cybersec @slava_moskvin_]

Slides and fuzzer code from the Fuzzing Linux kernel modules stream are now live: https://t.co/nhj0K0O0pi

Thanks again to @Steph3nSims for hosting!

[ll @llfamsec]

@XHackerx007 @StandoffBB See you next time!!

[ll @llfamsec]

Really enjoyed in Moscow! Thank @StandoffBB

[Standoff Bug Bounty @StandoffBB]

Today, Lei Lu and Xin Guo, independent researchers, gave a presentation on several commonly overlooked vulnerable iteration patterns in file system images. Thanks for the talk — waiting for the next time!

[ll @llfamsec]

@amoshkov @StandoffBB @pyn3rd Nice party🍻 See you next time!

[ll @llfamsec]

@HusseiN98D @phdays Green drink!

[Sean Heelan @seanhn]

I wrote-up how I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation. Link to the blog post below 👇

[Alex Moshkov @amoshkov]

Another part of the #PHDays speaker gang has landed! Welcome to Russia 🇷🇺❤️ @GodfatherOrwa @HusseiN98D @Zigoo0 @BlueEye46572843 @bhavukjain1 @XHackerx007 @llfamsec and Xin! More are joining us in the coming days 😄 Feeling overexcited)

[ll @llfamsec]

@azraelxuemo ddw🥹

[Linux Kernel Security @linkersec]

Linux Kernel Exploitation series

Awesome series of articles by @ri5255 that outlines many commonly-used modern exploitation techniques.

https://t.co/b9ydNug2Ja