From RCU Double Free to Root: Exploiting a Linux Kernel Race in cornelslop

Original text by ptr-yudai 14日前 読者になる

The article is a detailed write-up of the “cornelslop” Linux kernel exploitation challenge from DiceCTF 2026. It explains how a race condition in a kernel module leads to a double free vulnerability involving RCU callbacks. The module manages entries stored in an XArray and exposes several IOCTL operations for…

https://core-jmp.org/2026/03/from-rcu-double-free-to-root-exploiting-a-linux-kernel-race-in-cornelslop/