PinTheft Linux LPE
Aaron Esau published an LPE exploit for a page double-free bug in the RDS zerocopy implementation, which can be turned into a page-cache overwrite through io_uring.
Post #382
3.3K
- Sep 21, 2026CROSS-X: Generalized and Stable Cross-Cache Attack on the Linux Kernel Paper by Dong-ok Ki…
- Sep 16, 2026Testing race conditions with memory access tracing and stack-based delay injection Article…
- Sep 8, 2026SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free Article about exploiting C…
- Aug 14, 2026Gone in 60 Frames – USB Video Exploitation Article (and slides) by Alex Plaskett and Rober…
- Aug 11, 2026IonStack part III: Rooting Android 17 with GhostLock Article about adapting the exploit of…
- Jul 23, 2026I handed the epoll UAF to an agent Article by Guy Beck about using Claude for porting an e…