---
id: 5148
title: "The epoll uaf"
source_domain: guysrd.github.io
source_url: "https://guysrd.github.io/epoll-uaf"
published_at: "2026-05-10T00:00:00Z"
tags: ["vulnerability-research", "memory-safety", "use-after-free", "android", "linux-kernel", "exploit-development", "rcu", "epoll"]
phying_url: "https://phying.com/item/5148"
lang: en
---

# The epoll uaf

## Summary

Nicholas Carlini's epoll use-after-free in fs/eventpoll.c let RCU walkers race kfree() for a constrained write into a freed eventpoll; his Pixel 10 exploitation attempts fell short.

## Intelligence Metadata

- **Sources:** guysrd.github.io
- **Published:** 2026-05-10T00:00:00Z
- **Original:** https://guysrd.github.io/epoll-uaf
- **Phying News:** https://phying.com/item/5148