Skip to content
The epoll uaf
guysrd.github.io | blog | #vulnerability-research | #memory-safety | #use-after-free | #android | #linux-kernel | #exploit-development | #rcu | #epoll
Summary
Nicholas Carlini's epoll use-after-free in fs/eventpoll.c let RCU walkers race kfree() for a constrained write into a freed eventpoll; his Pixel 10 exploitation attempts fell short.
- Published
- Collected