Show HN: RustyTux – Linux kernel LPE exploiting an ESP-in-TCP race

AI Digest

RustyTux利用Linux内核ESP-in-TCP竞争条件实现本地提权，影响多个主流发行版，需精确时序控制。

RustyTux exploits a Linux kernel ESP-in-TCP race for LPE, affecting major distros with timing-sensitive exploitation.

Key points

• 利用ESP-in-TCP接收解析与套接字终止的竞争条件实现提权 Exploits ESP-in-TCP receive parsing vs socket teardown race
• 影响CentOS Stream 9等主流Linux发行版的内核版本 Affects CentOS Stream 9 and Ubuntu 26.04 LTS kernels
• 需通过x86预取时序侧信道泄露内核基址 Requires x86 prefetch timing side-channel to leak kernel base
• 支持自定义时序参数和模块路径劫持触发 Supports custom timing parameters and modprobe path hijacking
• 包含静态编译和KASLR辅助工具链 Includes static build and KASLR bypass tools

Takeaway: 揭示Linux内核安全漏洞的潜在风险与利用技术 / Highlights critical kernel vulnerabilities and exploitation techniques

Why it matters 展示漏洞利用技术，对安全研究有参考价值