News for hackers. Stuff that matters.

A comment on Local privilege escalation vulnerabilities in Linux.

Re:Local privilege escalation vulnerabilities in Linux by halz on Thursday November 05, 2026 @04:02AM (#50376895)
I assume this work resulted in the recent-ish TAINT_FORCED_BIND kernel feature https://lwn.net/Articles/1092680/

  This api over the years has been abused and recently come under a major
  fuzzing "attack" through tools like syzbot which decided that it would
  attempt to just randomly bind any driver to any type of device, causing
  loads of unneeded errors and pointless kernel patches to be generated by
  unsuspecting new developers.
[ Parent | on HN ]
Re:Local privilege escalation vulnerabilities in Linux by ShadowOfThePit on Thursday November 05, 2026 @06:23AM (#50377860)
> The flag is 'Y' which was unused, and can remembered as the user is "yeeting" the device being operated on here (thrown with force without regard for the thing being thrown).

lol

[ Parent | on HN ]