Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-27394] Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394)

theori.io | vulnerability | CVE-2024-27394 | #use-after-free | #linux-kernel | #race-condition | #cve-2024-27394 | #rcu | #exprace | #tcp-ao

Summary

A deep dive into CVE-2024-27394, a TCP-AO use-after-free caused by incorrect RCU API usage in the Linux kernel, covering RCU internals, the patch, and the ExpRace technique for reliable triggering.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-68138 PoC: Linux qdisc rate-table race local privilege escalation (github.com)
  2. The epoll uaf (guysrd.github.io)
  3. Linux Kernel Exploit (CVE-2022–32250) with mqueue (theori.io)
  4. PageJack in Action: CVE-2022-0995 exploit (blog.quarkslab.com)
  5. Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel (swarm.ptsecurity.com)
  6. CVE-2026-68398 PoC: Ubuntu PPPoL2TP kernel UAF local privilege escalation (github.com)

back