V4bel

@v4bel • 1,511 subscribers

Independent Vuln. Researcher / Pwn2Own Berlin 2025 / Google kernelCTF 0-day / Pwnie Awards 2025

Shorts

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

qwerty and I exploited a VSock 1-day in Google kernelCTF back in February, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

15,157 Aufrufe