Introducing the Frag Gap
(CVE-2026-53362/CVE-2026-53366)!
A bug in ipv4/ipv6 that I found together with @physicube, and it (used to) let you freely get root.
This could affect Android too, but we don't have a device so...
Full details are written up in both EN and KO at https://t.co/sQZhd5gioD
If you're curious about the code, just checking out https://t.co/n70dTMdH3s is enough.
We've got a few more fun bugs, and we'll post them as we find the time. This is just the Hitchhiker's Guide to the Linux Kernel.
Don't Kernel Panic!
Attention hackers! OOO has made the difficult decision to postpone @DEFCON 28 #CTF Quals to give teams a chance to take care of essentials and family during this phase of the pandemic. The new date will be the weekend of May 16th! Still online. Details: https://t.co/pagZ1fvp48