Skip to content

Add kernelCTF CVE-2026-23231_cos#376

Open
AIS0127 wants to merge 31 commits into
google:masterfrom
AIS0127:kernelctf-exp449
Open

Add kernelCTF CVE-2026-23231_cos#376
AIS0127 wants to merge 31 commits into
google:masterfrom
AIS0127:kernelctf-exp449

Conversation

@AIS0127
Copy link
Copy Markdown

@AIS0127 AIS0127 commented May 2, 2026

No description provided.

@AIS0127 AIS0127 force-pushed the kernelctf-exp449 branch 3 times, most recently from cd6040a to 23ec8cf Compare May 2, 2026 14:38
@AIS0127 AIS0127 force-pushed the kernelctf-exp449 branch from 23ec8cf to 57c2bcc Compare May 2, 2026 15:13

/* ROP gadgets (from vmlinux disassembly) */
/* 0xafc2d1: pop rsi; pop rdi; ret */
ct.AddSymbol("pop_rsi_pop_rdi_ret", 0xafc2d1);
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not a symbol. This is gadget. So you should follow https://google.github.io/security-research/kernelctf/style_guide.html#rop-chains as it's impossible to utilise XDK's RopChain

@artmetla
Copy link
Copy Markdown
Collaborator

Hey @AIS0127. Thanks for working on fixes. Please have a look also why exploit doesn't reproduce now.

@AIS0127 AIS0127 force-pushed the kernelctf-exp449 branch 9 times, most recently from 0b3156d to c7503e6 Compare May 30, 2026 09:58
@AIS0127 AIS0127 force-pushed the kernelctf-exp449 branch 3 times, most recently from 825d30a to e509137 Compare May 30, 2026 13:06
@AIS0127 AIS0127 force-pushed the kernelctf-exp449 branch from e509137 to 0a72530 Compare May 30, 2026 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants