Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

From a Netfilter Bug to kernelCTF: Exploiting CVE-2026-23274 in the Linux Kernel and winning a $10500 Bounty

nebusec.ai | vulnerability | High | CVE-2026-23274 | #ai-security | #kernel-security | #privilege-escalation | #linux-kernel | #exploit | #netfilter | #nebusec | #cve-2026-23274 | #kernelctf

Summary

NebuSec turns a Linux netfilter use-before-initialization bug (CVE-2026-23274) into a kernelCTF win, covering the uninitialized timer path, control-flow hijack and ROP chain to read the flag.
CVSS
7.8
Published
Collected

original ↗

Related coverage

  1. CVE-2026-68138 PoC: Linux qdisc rate-table race local privilege escalation (github.com)
  2. CVE-2026-68398 PoC: Ubuntu PPPoL2TP kernel UAF local privilege escalation (github.com)
  3. Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF (nebusec.ai)
  4. CVE-2026-23412 — Linux Kernel Netfilter BPF Hook Use-After-Free LPE (aretiq.ai)
  5. IonStack part III: Rooting Android 17 with GhostLock (nebusec.ai)
  6. Linux Kernel Exploit (CVE-2022–32250) with mqueue (theori.io)

back