use-after-free
14 posts
Article
User namespaces are still a root pipe
Dirty Frag is a Linux kernel UAF in IP fragment reassembly reachable via unprivileged user namespaces. CVSS 7.8. Mechanism, telemetry gaps, patch boundary.
Article
CVE-2026-4747: How a FreeBSD Kernel Flaw Enables Remote Privilege Escalation
CVE-2026-4747 is a remote root exploit in FreeBSD's kernel due to memory corruption during process creation. Learn how attackers gain full access without authentication and what admins must do immediately to defend their systems.