corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087e8-e816-72ab-bf84-ad71fa10a55c

[CVE-2025-38001] Exploiting All Google kernelCTF Instances And Debian 12 With A 0-Day For $82k: An RBTree Family Drama (Part One: LTS & COS)

syst3mfailure.io · published 11 July 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at syst3mfailure.io Wayback capture
1blogs citing
First cited
10 Sept 2025
Most recent
10 Sept 2025
Rank this month
not ranked
Links from this post
36
Words captured
16,422

Cited by

Blog
In the post
Date
willsroot.io
A Syzkaller Summer: Fixing False Positive Soft Lockups in net/sched Fuzzing Read at the source ↗
10 Sept 2025

Links from this post

Link
Host
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38001
cve.mitre.org
https://www.man7.org/linux/man-pages/man7/tc-hfsc.7.html
man7.org
https://www.man7.org/linux/man-pages/man8/tc-netem.8.html
man7.org
https://www.man7.org/linux/man-pages/man8/tc-tbf.8.html
man7.org
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ac9fe7dd8e730a103ae4481147395cc73492d786
git.kernel.org
https://github.com/google/security-research
github.com
https://t.co/nsvC00zZy8
t.co
https://twitter.com/cor_ctf/status/1937191641313358195?ref_src=twsrc%5Etfw
twitter.com
https://github.com/google/syzkaller
github.com
https://www.man7.org/linux/man-pages/man8/tc-hfsc.8.html
man7.org
[CVE-2025-37752] Two Bytes Of Madness: Pwning The Linux Kernel With A 0x0000 Written 262636 Bytes Out-Of-Bounds Read at the source ↗
syst3mfailure.io
https://elixir.bootlin.com/linux/v6.6.90/source/net/sched/sch_tbf.c
elixir.bootlin.com
https://cor.team
cor.team
https://anemato.de
anemato.de
https://brycec.me/
brycec.me
https://larry.sh/
larry.sh
https://max.xz.ax/
max.xz.ax
https://anemato.de/blog/kctf-vdf
anemato.de
https://google.github.io/security-research/kernelctf/rules.html
google.github.io
https://elixir.bootlin.com/linux/v6.6.90/source/net/sched/sch_hfsc.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6.90/source/net/sched/sch_netem.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6.90/source/lib/rbtree.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6.90/source/net/packet/internal.h
elixir.bootlin.com
https://xairy.io/
xairy.io
https://googleprojectzero.blogspot.com/2017/05/exploiting-linux-kernel-via-packet.html
googleprojectzero.blogspot.com
https://arxiv.org/html/2406.02624v3
arxiv.org
https://elixir.bootlin.com/linux/v6.6.90/source/net/packet/af_packet.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6.90/source/mm/memory.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6/source/io_uring/io_uring.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6.90/source/io_uring/io_uring.c
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6.90/source/include/linux/rbtree_types.h
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6.90/source/include/linux/rbtree_augmented.h
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6/source/include/linux/rbtree_augmented.h
elixir.bootlin.com
https://elixir.bootlin.com/linux/v6.6.90/source/include/linux/rbtree.h
elixir.bootlin.com
https://www.youtube.com/watch?v=8AHCfZTRGiI
youtube.com
https://github.com/0xdevil/CVE-2025-38001
github.com