Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2017-7308] Exploiting the Linux kernel via packet sockets

projectzero.google | vulnerability | CVE-2017-7308 | #fuzzing | #linux | #privilege-escalation | #kernel | #cve-2017-7308 | #packet-sockets | #syzkaller

Summary

A guest post describing CVE-2017-7308, a signedness bug in Linux packet sockets leading to a heap out-of-bounds write and local privilege escalation, found via syzkaller.
CVE
CVE-2017-7308
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Exploiting Recursion in the Linux Kernel
A report on an arbitrary recursion bug in the Linux kernel, triggerable by a local user on Ubuntu systems installed with home directory encryption support, with exploit code published.
vulnerability · projectzero.google
From Chrome renderer code exec to kernel with MSG_OOB
Write-up of CVE-2025-38236, a Linux kernel bug reachable from a compromised Chrome renderer via MSG_OOB socket handling, escalating renderer code execution into kernel privileges.
blog · projectzero.google
The Windows Registry Adventure #7: Attack surface analysis
Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.
blog · projectzero.google
Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages
Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.
blog · projectzero.google
MTE As Implemented, Part 3: The Kernel
Part 3 of the MTE As Implemented series, examining kernel-side support for Arm Memory Tagging Extension, its performance costs, and gaps observed in real implementations.
blog · projectzero.google
Exploiting null-dereferences in the Linux kernel
An examination of how null pointer dereferences in the Linux kernel can be turned into exploitable primitives under modern configurations, with examples and mitigations.
back