正在加载视频...
视频加载失败
VsockDrop: unprivileged Linux kernel LPE in the io_uring/vsock zerocopy path, no user namespaces needed. Bug affects Linux 6.7 -> 7.0.10, fixed in 7.0.11. PoC video: Ubuntu 26.04 LTS on bare metal. Exploit + mini write-up here:
20,552 次观看 • 2 个月前 •via X (Twitter)
5 条评论

vmpr0be2 个月前
the 🐐

Maher Azzouzi2 个月前
appreciate you bro

Sakib Sarkar🐞2 个月前
Nice

rusa2 个月前
the no user namespaces line is the whole story. io_uring completes work asynchronously in kernel context, so the mitigation everyone leaned on, disabling unprivileged userns, buys nothing here. the attack surface moved and the hardening did not follow.

idk2 个月前
Gg







