Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 25 May 2022 00:20:44 +0200
From: Norbert Slusarek <>
To: Solar Designer <>
Subject: Re: CVE-2022-1729: race condition in Linux perf
 subsystem leads to local privilege escalation

Hello Alexander,

>Since you shared actual exploit code on linux-distros, you're supposed
>to also post that to oss-security within 7 days of your first posting
>above, so by or on May 27. Do you intend to?

I don't intend to share the exploit to the public, mainly because
the issue was fixed only few days ago. Instead, anyone wanting to check
his own system for the bug should resort to the attached PoC repro.

>I realize this is one of the aspects that not everyone is happy about.

Yes, you got that right.

View attachment "repro.c" of type "text/plain" (1613 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.