GhostLock: A 15-Year-Old Linux Kernel Vulnerability Found in All Distributions
GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years
I discovered GhostLock, a critical stack-use-after-free vulnerability hidden in the Linux kernel for over 15 years. This flaw affects every major distribution since 2011, allowing unprivileged attackers to escalate privileges and escape containers. By exploiting a logic error in the rtmutex rework, we turned this bug into a stable exploit, earning a $92,337 reward from Google.
GhostLock was introduced in Linux 2.6.39 and fixed in Linux 7.1, existing in the Linux kernel for more than 15 years.
- dang
Comments moved to https://news.ycombinator.com/item?id=48834309, which was posted first. (Sorry! I still want to implement karma sharing so we can split credit between multiple submitters.)
- ranger_danger