Record · corpus.blog/posts/01a0d59c-a538-71c3-9eb8-281656364314

I Missed One TLB Shootdown and Somehow Ended Up Controlling a Page Table

blog.himanshuanand.com · published 13 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.himanshuanand.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 24
Words captured: 6,672

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://google.github.io/security-research/kernelctf/rules.html

google.github.io

https://github.com/gregkh/linux/tree/6d15a1029d425b15c59463910ebdccc4afe760d6

github.com

https://github.com/gregkh/linux/commit/0650f1c8b6b02b3edd489848fb9daa325eccf42c

github.com

https://lore.kernel.org/lkml/CAHDw0oGd0B4=uuv8NGqbUQ_ZVmSheU2bN70e4QhFXWvuAZdt2w@mail.gmail.com/

lore.kernel.org

https://github.com/gregkh/linux/blob/6d15a1029d425b15c59463910ebdccc4afe760d6/arch/x86/mm/tlb.c

github.com

https://github.com/torvalds/linux/commit/fea4e317f9e7e1f449ce90dedc27a2d2a95bee5a

github.com

https://docs.kernel.org/

docs.kernel.org

https://github.com/gregkh/linux/blob/6d15a1029d425b15c59463910ebdccc4afe760d6/include/linux/mm_types.h

github.com

https://docs.kernel.org/mm/process_addrs.html

docs.kernel.org

https://docs.kernel.org/mm/page_tables.html

docs.kernel.org

https://github.com/gregkh/linux/blob/6d15a1029d425b15c59463910ebdccc4afe760d6/arch/x86/include/asm/tlbflush.h

github.com

https://man7.org/linux/man-pages/man2/futex.2.html

man7.org

https://man7.org/linux/man-pages/man2/memfd_secret.2.html

man7.org

https://man7.org/linux/man-pages/man2/madvise.2.html

man7.org

https://github.com/unknownhad/security-research/blob/5d4fc091c20f1eb98ec4f03876583f8f41dfa584/pocs/linux/kernelctf/CVE-2025-37964_lts/exploit/lts-6.12.96/exploit.c

github.com

https://docs.kernel.org/admin-guide/mm/pagemap.html

docs.kernel.org

https://docs.kernel.org/admin-guide/sysctl/kernel.html

docs.kernel.org

https://googleprojectzero.blogspot.com/2019/01/taking-page-from-kernels-book-tlb-issue.html

googleprojectzero.blogspot.com

https://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html

googleprojectzero.blogspot.com

https://github.com/google/security-research/pull/418

github.com

https://github.com/unknownhad/security-research/tree/5d4fc091c20f1eb98ec4f03876583f8f41dfa584/pocs/linux/kernelctf/CVE-2025-37964_lts/exploit/lts-6.12.96

github.com

https://github.com/unknownhad/security-research/blob/5d4fc091c20f1eb98ec4f03876583f8f41dfa584/pocs/linux/kernelctf/CVE-2025-37964_lts/docs/exploit.md

github.com

https://cveawg.mitre.org/api/cve/CVE-2025-37964

cveawg.mitre.org

https://github.com/google/security-research/tree/master/pocs/linux/kernelctf

github.com