CVE-2022-0435: A Remote Stack Overflow in The Linux Kernel

By sam4k in linux on 15 Feb 2022

Recently I discovered a vulnerability in the Linux kernel that's been lurking there since 4.8 (July 2016)! CVE-2022-0435 is a remotely and locally exploitable stack overflow in the TIPC networking module of the Linux kernel…

A Dummy's Guide to Disclosing Linux Kernel Vulnerabilities

By sam4k in linux on 05 Feb 2022

A post sharing some insights into the process behind responsibly disclosing vulnerabilities in the Linux kernel...…