4 ms·
Learnings from kCTF VRP's 42 Linux kernel exploits submissions
- CoolCold 3y agoTo make it searchable: > Since its inception, the program has rewarded researchers with a total of 1.8 million USD, and in the past year, there has been a clear trend: 60% of the submissions exploited the io_uring component of the Linux kernel (we paid out around 1 million USD for io_uring alone). Furthermore, io_uring vulnerabilities were used in all the submissions which bypassed our mitigations.
- CoolCold 3y agoNor directly related, but an addition in terms of security like bypassing audit framework, LSM and so on , mentioned in https://youtu.be/AaaH6skUEI8 https://youtu.be/AaaH6skUEI8