Loading video...

Video Failed to Load

Go Home

VsockDrop: unprivileged Linux kernel LPE in the io_uring/vsock zerocopy path, no user namespaces needed. Bug affects Linux 6.7 -> 7.0.10, fixed in 7.0.11. PoC video: Ubuntu 26.04 LTS on bare metal. Exploit + mini write-up here:

20,552 views • 2 months ago •via X (Twitter)

5 Comments

vmpr0be's profile picture
vmpr0be2 months ago

the 🐐

Maher Azzouzi's profile picture
Maher Azzouzi2 months ago

appreciate you bro

Sakib Sarkar🐞's profile picture
Sakib Sarkar🐞2 months ago

Nice

rusa's profile picture
rusa2 months ago

the no user namespaces line is the whole story. io_uring completes work asynchronously in kernel context, so the mitigation everyone leaned on, disabling unprivileged userns, buys nothing here. the attack surface moved and the hardening did not follow.

idk's profile picture
idk2 months ago

Gg

Related Videos