/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 klecko.github.io
BFS Ekoparty 2022 Kernel exploitation challenge write-up | Klecko Blog
| | lkmidas.github.io
Linux Kernel Exploitation Technique: Overwriting modprobe_path - Midas's Blog
1.8 parsecs away

Travel
| | A popular and powerful technique to exploit the Linux kernel through modprobe_path
| | mutur4.github.io
Linux Kernel: Exploiting an AAW & Heap Ovf (Blunder Driver) | BinaryChunk's Blog
1.0 parsecs away

Travel
| | This blog post will cover the exploitation of vulnerable a Linux Kernel Driver by chaining a Heap Overflow bug with a 'sandboxed' Arbitrary Address Write (AAW) for Local Priviledge Escalation to root by overwriting core_pattern with most mitigations enabled.
| | yanglingxi1993.github.io
Dirty_Pagetable
2.5 parsecs away

Travel
| |
| | syst3mfailure.io
[CVE-2025-38001] Exploiting All Google kernelCTF Instances And Debian 12 With A 0-Day For $82k: An RBTree Family Drama (Part One: LTS & COS)
16.4 parsecs away

Travel
| CVE-2025-38001 is a Use-After-Free vulnerability in the Linux network packet scheduler, specifically in the HFSC queuing discipline. When the HFSC qdisc is utilized with NETEM and NETEM packet duplication is enabled, using HFSC_RSC it is possible to cause a double class insertion in the HFSC eligible tree. Under normal conditions, this would lead to an infinite loop in hfsc_dequeue() due to an RBTree cycle. However, by adding TBF as root qdisc, it is possible to prevent packets from being dequeued, bypass the infinite loop, free the class, and trigger a Use-After-Free.