tags:GSMheap_overflowlinuxkernel original link: Etiquette for dropping PoCs in 2024? A Linux LPE newsletter link: exploits.club Weekly Newsletter 23


Exploits Club Summary:

What’s the right way to drop a PoC? Well thankfully for us, the people on X decided that it was “full exploits with offsets”, so that’s exactly what @roddux did with his Linux LPE, germy. The GitHub repo includes a write-up as well, complete with an overview of the root cause, exploit strategy, and mitigation bypasses. The bug stems from 3 seemingly inconsequential issues that, when taken in total, lead to an overflow.