ch
Feedback
Linux Kernel Security

Linux Kernel Security

前往频道在 Telegram

Links related to Linux kernel security and exploitation | Chat @linkersec_chat | @xairy @a13xp0p0v

显示更多
俄罗斯127 178技术与应用20 730
4 406
订阅者
+124 小时
+297 天
+11230 天

数据加载中...

相似频道
The Bug Bounty Hunter
47.5K
The Bug Bounty Hunter
Android Security & Malware
43.8K
Android Security & Malware
r0 Crew (Channel)
9.2K
r0 Crew (Channel)
idapro (Not official)
2.7K
idapro (Not official)
CloudSec Wine
2.2K
CloudSec Wine
avatar
1
更多频道
标签云
kernel65
linux26
exploit20
driver19
cve-202518
exploitation11
subsystem11
gpu10
module9
slide9
uaf9
author8
cve-20248
ksmbd8
privilege8
implementation7
researcher7
rootkit7
context6
scheduler6
进出提及
---
---
---
---
---
---
吸引订阅者
六月 '26
六月 '26
+57
在0个频道中
五月 '26
+124
在0个频道中
Get PRO
四月 '26
+106
在0个频道中
Get PRO
三月 '26
+81
在0个频道中
Get PRO
二月 '26
+107
在0个频道中
Get PRO
一月 '26
+124
在2个频道中
Get PRO
十二月 '25
+156
在2个频道中
Get PRO
十一月 '25
+120
在1个频道中
Get PRO
十月 '25
+95
在1个频道中
Get PRO
九月 '25
+102
在2个频道中
Get PRO
八月 '25
+52
在1个频道中
Get PRO
七月 '25
+70
在1个频道中
Get PRO
六月 '25
+51
在1个频道中
Get PRO
五月 '25
+65
在2个频道中
Get PRO
四月 '25
+78
在2个频道中
Get PRO
三月 '25
+111
在2个频道中
Get PRO
二月 '25
+53
在0个频道中
Get PRO
一月 '25
+52
在1个频道中
Get PRO
十二月 '24
+147
在3个频道中
Get PRO
十一月 '24
+93
在0个频道中
Get PRO
十月 '24
+137
在2个频道中
Get PRO
九月 '24
+134
在2个频道中
Get PRO
八月 '24
+111
在2个频道中
Get PRO
七月 '24
+106
在2个频道中
Get PRO
六月 '24
+127
在0个频道中
Get PRO
五月 '24
+77
在0个频道中
Get PRO
四月 '24
+94
在0个频道中
Get PRO
三月 '24
+81
在1个频道中
Get PRO
二月 '24
+96
在0个频道中
Get PRO
一月 '24
+104
在0个频道中
Get PRO
十二月 '23
+84
在0个频道中
Get PRO
十一月 '23
+150
在0个频道中
Get PRO
十月 '23
+91
在0个频道中
Get PRO
九月 '23
+134
在0个频道中
Get PRO
八月 '23
+92
在0个频道中
Get PRO
七月 '23
+73
在0个频道中
Get PRO
六月 '23
+100
在0个频道中
Get PRO
五月 '23
+144
在0个频道中
Get PRO
四月 '23
+36
在0个频道中
Get PRO
三月 '23
+43
在0个频道中
Get PRO
二月 '23
+73
在0个频道中
Get PRO
一月 '23
+67
在0个频道中
Get PRO
十二月 '22
+80
在0个频道中
Get PRO
十一月 '22
+85
在0个频道中
Get PRO
十月 '22
+66
在0个频道中
Get PRO
九月 '22
+77
在0个频道中
Get PRO
八月 '22
+109
在0个频道中
Get PRO
七月 '22
+67
在0个频道中
Get PRO
六月 '22
+84
在0个频道中
Get PRO
五月 '22
+142
在0个频道中
Get PRO
四月 '22
+91
在0个频道中
Get PRO
三月 '22
+98
在0个频道中
Get PRO
二月 '22
+68
在0个频道中
Get PRO
一月 '22
+128
在0个频道中
Get PRO
十二月 '21
+57
在0个频道中
Get PRO
十一月 '21
+149
在0个频道中
Get PRO
十月 '21
+64
在0个频道中
Get PRO
九月 '21
+111
在0个频道中
Get PRO
八月 '21
+123
在0个频道中
Get PRO
七月 '21
+48
在0个频道中
Get PRO
六月 '21
+23
在0个频道中
Get PRO
五月 '21
+29
在0个频道中
Get PRO
四月 '21
+333
在0个频道中
日期
订阅者增长
提及
频道
11 六月+1
10 六月+2
09 六月+1
08 六月+1
07 六月+3
06 六月+8
05 六月+5
04 六月+14
03 六月+6
02 六月+6
01 六月+10
频道帖子
Linux Kernel Security
Unix GC Remastered Article by Moe Acherir about the internals of the new Unix sockets garbage collector implementation and th
Unix GC Remastered Article by Moe Acherir about the internals of the new Unix sockets garbage collector implementation and the analysis of CVE-2025-40214, which was used in a kernelCTF entry.

2
PinTheft Linux LPE Aaron Esau published an LPE exploit for a page double-free bug in the RDS zerocopy implementation, which can be turned into a page-cache overwrite through io_uring.
867
3
Logic bug in the Linux kernel's __ptrace_may_access() function (CVE-2026-46333) Article about a logical bug in the ptrace imp
Logic bug in the Linux kernel's __ptrace_may_access() function (CVE-2026-46333) Article about a logical bug in the ptrace implementation that allows getting access to file descriptors of other processes and thus escalating privileges in certain scenarios.
1 713
4
StepStone: LLM-Based GPU Kernel Driver Fuzzing via User-Space Libraries Paper by Xiaochen Zou et. al about using LLMs for gen
StepStone: LLM-Based GPU Kernel Driver Fuzzing via User-Space Libraries Paper by Xiaochen Zou et. al about using LLMs for generating syzkaller descriptions for fuzzing GPU drivers via their userspace libraries APIs.
1 788
5
Privilege Escalation via a Page Use-After-Free in Qualcomm's AI Accelerator Linux Kernel Driver Article by Lukas Maar about e
Privilege Escalation via a Page Use-After-Free in Qualcomm's AI Accelerator Linux Kernel Driver Article by Lukas Maar about exploiting a bug in the mmap handler of the QAIC driver that causes a page UAF.
2 067
6
Discovery & Validation in the Linux Kernel Three-part article by Samuel Page about analyzing two vulnerabilities (in CAN sock
Discovery & Validation in the Linux Kernel Three-part article by Samuel Page about analyzing two vulnerabilities (in CAN sockets and FUSE) and attempting to use local LLMs to rediscover the bugs.
2 686
7
Recent Page Cache Corruption Bugs Multitude of vulnerabilities that allow overwriting the page cache and thus changing the in-memory contents of read-only files to gain LPE or escape a container in certain scenarios. All stem from kernel code paths that perform in-place overwrites of user-supplied input pages without verifying that the pages are writable. Copy Fail (CVE-2026-31431): — Announcement; — Better write-up. Dirty Frag (CVE-2026-43284 and CVE-2026-43500): — Covers two independent vulnerabilities that do not require chaining; — CVE-2026-43284 is alternatively titled Copy Fail 2; — Original write-up; — Avoiding bruteforcing for CVE-2026-43500. Fragnesia (CVE-2026-46300): — Original report; — Variant. DirtyCBC / DirtyDecrypt (CVE-2026-31635?): — Write-up; — Another exploit.
2 762
8
+1
没有文字...
1 875
9
Some notes on the security properties of the pipe_buffer kernel object a13xp0p0v (me) posted an article about a few experiments with the pipe_buffer kernel object within his kernel-hack-drill project. Alexander described multiple pipe_buffer features relevant for kernel exploits that rely on this object.
0
10
Out-of-Cancel: A Vulnerability Class Rooted in Workqueue Cancellation APIs V4bel published an article describing a complicate
Out-of-Cancel: A Vulnerability Class Rooted in Workqueue Cancellation APIs V4bel published an article describing a complicated exploit of a race condition caused by a misuse of the cancel_work_sync() kernel API in the network subsystem.
0
11
Walkthrough of an N-day Android GPU driver vulnerability Talk by Angus about analyzing CVE-2022-22706 — a logical bug in the Mali GPU driver that allows getting write access to read-only memory.
0
12
From KernelSnitch to Practical msg_msg/pipe_buffer Heap KASLR Leaks Article by Lukas Maar about evaluating the KernelSnitch t
From KernelSnitch to Practical msg_msg/pipe_buffer Heap KASLR Leaks Article by Lukas Maar about evaluating the KernelSnitch timing side-channel attack on a variety of systems, including Android. The attack allows leaking addresses of exploitation-relevant kernel allocations. Lukas also published the source code for executing the attack.
0
13
Assessing Claude Mythos Preview’s cybersecurity capabilities Article by Nicholas Carlini et. al about the security research c
Assessing Claude Mythos Preview’s cybersecurity capabilities Article by Nicholas Carlini et. al about the security research capabilities of the new Anthropic's LLM called Claude Mythos Preview. The LLM was used to discover multiple 0-days in the Linux kernel and also write privilege escalation exploits for a few previously known vulnerabilities; the article provides a detailed write-up for two such exploits.
0
14
slab: support for compiler-assisted type-based slab cache partitioning Marco Elver posted a kernel patch that provides an alt
slab: support for compiler-assisted type-based slab cache partitioning Marco Elver posted a kernel patch that provides an alternative mode to RANDOM_KMALLOC_CACHES called TYPED_KMALLOC_CACHES. The new mode leverages a Clang 22 feature called "allocation tokens". Unlike RANDOM_KMALLOC_CACHES, this mode deterministically assigns caches to allocations based on their types, and not allocation sites.
0
15
CrackArmor: Multiple vulnerabilities in AppArmor Article about a variety of vulnerabilities found in the AppArmor LSM impleme
CrackArmor: Multiple vulnerabilities in AppArmor Article about a variety of vulnerabilities found in the AppArmor LSM implementation, including a few kernel memory corruptions. Authors exploited them to achieve LPE on Ubuntu and Debian.
0
16
A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Excellent article by Quang Le about exploiting CVE-20
A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Excellent article by Quang Le about exploiting CVE-2025-38617 — a race condition that leads to a use-after-free in the packet sockets implementation. The implemented exploit was used to pwn the kernelCTF mitigation-v4-6.6 instance. The exploit bypasses CONFIG_RANDOM_KMALLOC_CACHES and CONFIG_SLAB_VIRTUAL.
0
查看所有帖子