Linux Kernel Security

@linkersec

Links related to Linux kernel security and exploitation. Maintained by @andreyknvl and @a13xp0p0v.

Linux Kernel Security
@linkersec
Aug 14
Gone in 60 Frames – USB Video Exploitation Article (and slides) by @alexjplaskett and @robHerrera_ about fuzzing USB drivers with syzkaller and writing an exploit that gains code execution over USB on Ubuntu. Article: media.defcon.org/DEF%20CON%2034… Slides: media.defcon.org/DEF%20CON%2034…
2
Linux Kernel Security
@linkersec
Aug 11
IonStack part III: Rooting Android 17 with GhostLock Article about adapting the exploit of CVE-2026-43499 (kernel stack UAF) to Android. The researchers used KernelSnitch, ashmem fops overwriting, pipe_buffer corruption, and other tricks to perform LPE. nebusec.ai/research/ionst…
Linux Kernel Security
@linkersec
Jul 23
I handed the epoll UAF to an agent Article by Guy Beck about using Claude for porting an exploit for an eventpoll vulnerability to Android. guysrd.github.io/epoll-uaf-agent
1
Linux Kernel Security
@linkersec
Jul 21
IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Article about exploiting a racy stack use-after-free in the futex implementation. The bug was used to pwn a kernelCTF instance. nebusec.ai/research/ionst…
1
Linux Kernel Security
@linkersec
Jul 18
Januscape: Guest-to-Host Escape in KVM/x86 @v4bel published an article about a use-after-free vulnerability in the shadow MMU emulation of KVM/x86 (CVE-2026-53359). Both Intel (VMX) and AMD (SVM) code is affected. github.com/V4bel/Januscap…
1