Infinity Core: Linux Kernel Core LPEs
Researchers disclosed six Linux kernel flaws enabling local privilege escalation, container escape, and Android compromise.
Hyunwoo Kim published Infinity Core after a linux-distros embargo expired, describing six Linux kernel vulnerabilities in the Timer, Signal, MM, Futex, Scheduler, and SLAB subsystems. The report says the flaws can be used for local privilege escalation on Linux servers, container escape, and Android local privilege escalation. The posted text does not name CVE identifiers or state that exploitation has been observed.
- Embargo with linux-distros maintainers has expired.
- Six flaws span Timer, Signal, MM, Futex, Scheduler, and SLAB.
- Impact includes server LPE, container escape, and Android LPE.
- No CVE identifiers or confirmed in-the-wild exploitation are stated.
Posted by Hyunwoo Kim on Oct 16 Hi, The embargo agreed with the linux-distros () vs openwall org maintainers has expired, so I am posting this report. This is a report on "Infinity Core", a collection of 6 vulnerabilities found in the Timer, Signal, MM, Futex, Scheduler, and SLAB subsystems of the Linux kernel. These vulnerabilities can be exploited for Linux server LPE, container escape, and Android LPE. The vulnerabilities are summarized below. ===...
This source does not provide full text. Read it at seclists.org.