Old Wine in a New Bottle: A Decade-Old lxd-Group Root, Re-Armed

A report on an arbitrary recursion bug in the Linux kernel, triggerable by a local user on Ubuntu systems installed with home directory encryption support, with exploit code published.

A retrospective on CVE-2025-39964, an AF_ALG race condition causing out-of-bounds scatterlist access in the Linux kernel. Exploitation yields root and a Docker container escape.

Provides penetration testers and red teams with an all-in-one, multi-architecture automated post-exploitation toolkit that simplifies Linux kernel privilege escalation without requiring on-target compilers.

Demonstrates that container isolation can be completely compromised via Linux kernel subsystem flaws, providing security researchers with reproducible testbeds to evaluate kernel-level container escape threats.

Write-up of CVE-2025-38236, a Linux kernel bug reachable from a compromised Chrome renderer via MSG_OOB socket handling, escalating renderer code execution into kernel privileges.

A guest post describing CVE-2017-7308, a signedness bug in Linux packet sockets leading to a heap out-of-bounds write and local privilege escalation, found via syzkaller.