V4bel/InfinityCore

选用指南

AI 根据 README 整理 · 2026/10/17 10:01:09

目标用户

面向安全研究人员和系统管理员，了解Linux内核核心漏洞的细节。

查看 README 依据

# Infinity Core: Linux Kernel Core LPEs <p align="center"> <img src="assets/tux.png" width="550" alt="tux"> </p> # Abstract This document describes six Linux kernel core vulnerabilities reported and patched by [Hyunwoo Kim (@v4bel)](https://x.com/v4bel). The vulnerabilities covered here affect **Kernel Core** subsystems that have historically seen relatively few security issues. They enable LPE and container escape on Linux distributions, and some also allow an attacker to gain full root privileges from the Android `untrusted_app` domain.

使用方式

作为技术文档阅读，包含漏洞分析、PoC描述和影响范围。

查看 README 依据

# Infinity Core: Linux Kernel Core LPEs <p align="center"> <img src="assets/tux.png" width="550" alt="tux"> </p> # Abstract This document describes six Linux kernel core vulnerabilities reported and patched by [Hyunwoo Kim (@v4bel)](https://x.com/v4bel). The vulnerabilities covered here affect **Kernel Core** subsystems that have historically seen relatively few security issues. They enable LPE and container escape on Linux distributions, and some also allow an attacker to gain full root privileges from the Android `untrusted_app` domain.

This document excludes areas where vulnerabilities are common, such as networking, sockets, perf, and BPF, as well as bugs that require a user namespace to trigger. > [!NOTE] > After these vulnerabilities were reported to linux-distros@vs.openwall.org and the agreed embargo ended, the vulnerability details were posted to oss-security and this Infinity Core document was published. # Vulnerability Summary | Subsystem | CVE | Impact | Tested target | Introduced | Fixed | | --- | --- | --- | --- | --- | --- |

已知限制

文档排除了网络、套接字、perf和BPF等常见漏洞领域，以及需要用户命名空间触发的漏洞。

查看 README 依据

This document excludes areas where vulnerabilities are common, such as networking, sockets, perf, and BPF, as well as bugs that require a user namespace to trigger. > [!NOTE] > After these vulnerabilities were reported to linux-distros@vs.openwall.org and the agreed embargo ended, the vulnerability details were posted to oss-security and this Infinity Core document was published. # Vulnerability Summary | Subsystem | CVE | Impact | Tested target | Introduced | Fixed | | --- | --- | --- | --- | --- | --- |