News for hackers. Stuff that matters.

A comment on GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years. Parent comment

Re:GhostLock, a stack-UAF that has existed in ALL Linux dist... by Chu4eeno on Saturday July 11, 2026 @02:41AM (#48869412)
fwiw, the firefox vulnerability seems to be CVE-2026-10702 (type confusion in the ionmonkey jit compiler): https://www.sentinelone.com/vulnerability-database/cve-2026-...
[ Parent | on HN ]
Re:GhostLock, a stack-UAF that has existed in ALL Linux dist... by no_time on Monday July 13, 2026 @07:22AM (#48890993)
Severity score of 4.3 seems low considering the click2pwn in this thread. Though Firefox on Android is uniquely bad because of the lack of sandboxing.
[ Parent | on HN ]