GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

djfergus 61 points 13 comments July 10, 2026

Discussion Highlights (4 comments)

ranger_danger

dupe of https://news.ycombinator.com/item?id=48834309

teleforce

>Google has rewarded us $92,337 in kernelCTF I'm all ears now

password4321

Forgot to include "LPE" (local...) in the title so most of us can get back to weekending.

amatecha

Daaaaamn: "GhostLock was introduced in Linux 2.6.39 and fixed in Linux 7.1."