How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail

Lobsters·2 points·fro·4 days ago·idnsec.com

A retrospective on CVE-2025-39964, an AF_ALG race condition I found in 2025 before Copy Fail drew attention to the same subsystem. I explain the out-of-bounds scatterlist access, the usercopy oracle, and the exploit…

Read the full article at idnsec.com →

#linux #alg #fail #copy #copy fail #privilege #escalation #local

Related stories

I Found a $113,337 Af_alg Linux Local Privilege Escalation Before Copy Failidnsec.com
Hacker News · 2 points · 1 day ago
I Found a $113,337 Af_alg Linux Local Privilege Escalation Before Copy Failidnsec.com
Hacker News · 2 points · 4 days ago
RustyTux: Linux kernel n-day local privilege escalationgithub.com
Hacker News · 6 points · 9 days ago
The lightweight Arch Linux based distro that runs, without root privileges, upon any Linux distrogithub.com
Lobsters · 12 points · over 4 years ago
Show HN: Run Linux kernel drivers in userspace on Neptune OS, NT-like OS on seL4
Hacker News · 4 points · 8 days ago
Show HN: Ox – A local agent that uses the internet for youopenox.ai
Hacker News · 2 points · 7 days ago

Related topics

windows86 kernel48 desktop76 linux kernel12 macos78 ai2028 security257 file67 hardware121 snapdragon12 android64 os45