↓ Skip to main content

“Somebody from the Linux kernel team then emailed the proposed fix to <linux-distros () vs openwall org> and that email also included a link to download our description of exploitation techniques and our exploit”

Piotr Krysiukseclists.org ↗

Patryk Sondej and Piotr Krysiuk turned a nf_tables bug into a root shell for any unprivileged local user. They shared the exploit privately with the kernel security team. Someone on that team forwarded it to the distros list, which starts a seven-day clock to publish. The researchers kept the exploit private. The kernel team leaked it.