正在加载视频...

视频加载失败

VsockDrop: unprivileged Linux kernel LPE in the io_uring/vsock zerocopy path, no user namespaces needed. Bug affects Linux 6.7 -> 7.0.10, fixed in 7.0.11. PoC video: Ubuntu 26.04 LTS on bare metal. Exploit + mini write-up here:

20,552 次观看 • 2 个月前 •via X (Twitter)

5 条评论

vmpr0be 的头像
vmpr0be2 个月前

the 🐐

Maher Azzouzi 的头像
Maher Azzouzi2 个月前

appreciate you bro

Sakib Sarkar🐞 的头像
Sakib Sarkar🐞2 个月前

Nice

rusa 的头像
rusa2 个月前

the no user namespaces line is the whole story. io_uring completes work asynchronously in kernel context, so the mitigation everyone leaned on, disabling unprivileged userns, buys nothing here. the attack surface moved and the hardening did not follow.

idk 的头像
idk2 个月前

Gg

相关视频