PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-27394] Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394)

theori.io | vulnerability | CVE-2024-27394 | #use-after-free | #linux-kernel | #race-condition | #cve-2024-27394 | #rcu | #exprace | #tcp-ao
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A deep dive into CVE-2024-27394, a TCP-AO use-after-free caused by incorrect RCU API usage in the Linux kernel, covering RCU internals, the patch, and the ExpRace technique for reliable triggering.
CVE
CVE-2024-27394
Published
Collected

Related coverage

tool · github.com
CVE-2026-68138 PoC: Linux qdisc rate-table race local privilege escalation
The public PoC turns the kernel race into a reproducible local root-escalation chain. It requires specific kernel configuration and an isolated lab, but hosts exposing the relevant namespace, traffic-control, and module-loading capabilities should verify that the upstream fix or an equivalent backport is present.
blog · guysrd.github.io
The epoll uaf
Nicholas Carlini's epoll use-after-free in fs/eventpoll.c let RCU walkers race kfree() for a constrained write into a freed eventpoll; his Pixel 10 exploitation attempts fell short.
vulnerability · theori.io
Linux Kernel Exploit (CVE-2022–32250) with mqueue
Exploiting CVE-2022-32250, a Netfilter nftables use-after-free write, to root Ubuntu 22.04: heap and KASLR leaks with mqueue, a modprobe_path overwrite, plus root-cause analysis and patch.
High · vulnerability · swarm.ptsecurity.com
Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel
Alexander Popov presents kernel-hack-drill, the tooling that helped him exploit CVE-2024-50264, a race-condition use-after-free in the Linux kernel's AF_VSOCK (Pwnie 2025, Best Privilege Escalation).
vulnerability · idnsec.com
[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
Write-up of CVE-2025-39964, an AF_ALG race condition in the Linux kernel enabling an out-of-bounds scatterlist write. The exploit overwrites core_pattern for root and a Docker container escape.
High · vulnerability · github.com
CVE-2026-68398 PoC: Ubuntu PPPoL2TP kernel UAF local privilege escalation
The PoC turns a kernel UAF into local privilege escalation from an ordinary user to root, making it relevant for authorized Linux kernel research and patch validation. The race can panic or corrupt a system, so it should only run in an isolated, recoverable lab VM and affected kernels should be updated.
Back