PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Oops! It's a kernel stack use-after-free: Exploiting NVIDIA's GPU Linux drivers

blog.quarkslab.com | research | #use-after-free | #exploitation | #linux-kernel | #gpu | #nvidia | #cve-2025-23280
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab details two flaws in NVIDIA's Linux Open GPU Kernel Modules — a null-pointer dereference (CVE-2025-23300) and a stack use-after-free (CVE-2025-23280) — with a kernel R/W PoC.
Published
Collected

Related coverage

research · starlabs.sg
When AI Makes 0-Days Feel Like N-Days
The author used AI to find a UAF bug in Linux net/sched and built an LPE exploit for CentOS 9 at TyphoonPwn 2026. AI sped things up, but deep subsystem knowledge still mattered.
research · aretiq.ai
CVE-2026-23412 — Linux Kernel Netfilter BPF Hook Use-After-Free LPE
CVE-2026-23412: a use-after-free in Linux's BPF netfilter links—synchronous deallocation racing hook enumeration—enables local privilege escalation via heap spray; fixed in 7.0-rc5.
vulnerability · theori.io
Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394)
A deep dive into CVE-2024-27394, a TCP-AO use-after-free caused by incorrect RCU API usage in the Linux kernel, covering RCU internals, the patch, and the ExpRace technique for reliable triggering.
vulnerability · theori.io
Linux Kernel Exploit (CVE-2022–32250) with mqueue
Exploiting CVE-2022-32250, a Netfilter nftables use-after-free write, to root Ubuntu 22.04: heap and KASLR leaks with mqueue, a modprobe_path overwrite, plus root-cause analysis and patch.
High · vulnerability · swarm.ptsecurity.com
Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel
Alexander Popov presents kernel-hack-drill, the tooling that helped him exploit CVE-2024-50264, a race-condition use-after-free in the Linux kernel's AF_VSOCK (Pwnie 2025, Best Privilege Escalation).
High · vulnerability · github.com
CVE-2026-68398 PoC: Ubuntu PPPoL2TP kernel UAF local privilege escalation
The PoC turns a kernel UAF into local privilege escalation from an ordinary user to root, making it relevant for authorized Linux kernel research and patch validation. The race can panic or corrupt a system, so it should only run in an isolated, recoverable lab VM and affected kernels should be updated.
Back