/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.willsroot.io
Will's Root: Reviving Exploits Against Cred Structs - Six Byte Cross Cache Overflow to Leakless Data-Oriented Kernel Pwnage
| | syst3mfailure.io
[CVE-2025-38001] Exploiting All Google kernelCTF Instances And Debian 12 With A 0-Day For $82k: An RBTree Family Drama (Part One: LTS & COS)
2.7 parsecs away

Travel
| | CVE-2025-38001 is a Use-After-Free vulnerability in the Linux network packet scheduler, specifically in the HFSC queuing discipline. When the HFSC qdisc is utilized with NETEM and NETEM packet duplication is enabled, using HFSC_RSC it is possible to cause a double class insertion in the HFSC eligible tree. Under normal conditions, this would lead to an infinite loop in hfsc_dequeue() due to an RBTree cycle. However, by adding TBF as root qdisc, it is possible to prevent packets from being dequeued, bypass the infinite loop, free the class, and trigger a Use-After-Free.
| | docfate111.github.io
CVE-2021-42327 GPU kernel driver SLUB overflow | The blog
3.3 parsecs away

Travel
| | [AI summary] A detailed explanation of a Linux kernel vulnerability (CVE-2021-42327) in the GPU driver, involving a SLUB buffer overflow that allows privilege escalation and arbitrary code execution through exploitation techniques like heap spraying and KASLR bypass.
| | mdanilor.github.io
Hello, kernel: Exploiting an intentionally vulnerable Linux driver
2.9 parsecs away

Travel
| | A beginers guide into a Linux Kernel stack overflow vulnerability.
| | hernan.de
Grant H. - Tailoring CVE-2019-2215 to Achieve Root
23.5 parsecs away

Travel
| When I heard about the emergency disclosure of CVE-2019-2215 by Project Zero, I decided to replicate the exploit on my local device to see it in action. I so...