Skip to content

Commit 06f62be

Browse files
committed
docs: drop stale xdk-db reference
1 parent db02ca1 commit 06f62be

1 file changed

Lines changed: 0 additions & 2 deletions

File tree

  • pocs/linux/kernelctf/CVE-2026-43074_lts/docs

pocs/linux/kernelctf/CVE-2026-43074_lts/docs/exploit.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,6 @@
11
# Exploit details for CVE-2026-43074
22

33
If you need the bug background first, read [vulnerability.md](./vulnerability.md).
4-
If you need the kernelXDK DB additions and regeneration workflow, read [xdk-db.md](./xdk-db.md).
5-
64
## Overview
75

86
This exploit is a data-only privilege-escalation chain for the eventpoll use-after-free in CVE-2026-43074 ("epollution"). It does **not** try to get direct RIP control. Instead, it reuses the freed `struct eventpoll` object to steer `ep_get_upwards_depth_proc()` into controlled memory, uses repeated oopses as an information leak, and then uses the resulting write primitive to clear credential fields until one of the forked helper processes becomes root.

0 commit comments

Comments
 (0)