#stack

· 2mo ago

GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years https://nebusec.ai/research/ionstack-part-2/ Comments: https://news.ycombinator.com/item?id=48864969 #HackerNews #GhostLock #stack-UAF #Linux #Vulnerability #Cybersecurity #Research #TechNews

IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

NebuSec

IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by Nebu that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.

Roz B @Grittens@mastodon.social

· 9mo ago

Boosted by @ferrix@mastodon.online

Are there any people who are currently working on the unix 2038 problem, I have a colleague who needs info for an article. #unix #2038 #jahr2038 #posix #stack #criticalinfrastructure

You've seen all posts