Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-23412 — Linux Kernel Netfilter BPF Hook Use-After-Free LPE

aretiq.ai | research | CVE-2026-23412 | #vulnerability-research | #privilege-escalation | #use-after-free | #linux-kernel | #bpf | #netfilter | #cve-2026-23412

Summary

CVE-2026-23412: a use-after-free in Linux's BPF netfilter links—synchronous deallocation racing hook enumeration—enables local privilege escalation via heap spray; fixed in 7.0-rc5.
CVE
CVE-2026-23412
Published
Collected

original ↗

Related coverage

research · starlabs.sg
[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
A retrospective on CVE-2025-39964, an AF_ALG race condition causing out-of-bounds scatterlist access in the Linux kernel. Exploitation yields root and a Docker container escape.
research · starlabs.sg
When AI Makes 0-Days Feel Like N-Days
The author used AI to find a UAF bug in Linux net/sched and built an LPE exploit for CentOS 9 at TyphoonPwn 2026. AI sped things up, but deep subsystem knowledge still mattered.
vulnerability · theori.io
Linux Kernel Exploit (CVE-2022–32250) with mqueue
Exploiting CVE-2022-32250, a Netfilter nftables use-after-free write, to root Ubuntu 22.04: heap and KASLR leaks with mqueue, a modprobe_path overwrite, plus root-cause analysis and patch.
research · blog.quarkslab.com
Oops! It's a kernel stack use-after-free: Exploiting NVIDIA's GPU Linux drivers
Quarkslab details two flaws in NVIDIA's Linux Open GPU Kernel Modules — a null-pointer dereference (CVE-2025-23300) and a stack use-after-free (CVE-2025-23280) — with a kernel R/W PoC.
research · starlabs.sg
Old Wine in a New Bottle: A Decade-Old lxd-Group Root, Re-Armed
Ubuntu Server silently puts the first user in the lxd group, root-equivalent by design. The seeded lxd-installer socket lets lxd users install LXD password-free and reach host root; vendor won't fix.
vulnerability · theori.io
Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394)
A deep dive into CVE-2024-27394, a TCP-AO use-after-free caused by incorrect RCU API usage in the Linux kernel, covering RCU internals, the patch, and the ExpRace technique for reliable triggering.
back