Video wird geladen...
Video konnte nicht geladen werden
VsockDrop: unprivileged Linux kernel LPE in the io_uring/vsock zerocopy path, no user namespaces needed. Bug affects Linux 6.7 -> 7.0.10, fixed in 7.0.11. PoC video: Ubuntu 26.04 LTS on bare metal. Exploit + mini write-up here:
20,451 Aufrufe • vor 2 Monaten •via X (Twitter)
5 Kommentare

vmpr0bevor 2 Monaten
the 🐐

Maher Azzouzivor 2 Monaten
appreciate you bro

Sakib Sarkar🐞vor 2 Monaten
Nice

rusavor 2 Monaten
the no user namespaces line is the whole story. io_uring completes work asynchronously in kernel context, so the mitigation everyone leaned on, disabling unprivileged userns, buys nothing here. the attack surface moved and the hardening did not follow.

idkvor 2 Monaten
Gg







