Skip to main content

9,364 questions

Newest Active Bountied Unanswered

Question list filters

Filter by
Sorted by
Tagged with
Score of 0
0 answers
26 views

I built a custom image of arch with zfs kernel modules installed, and running a zfs striped zpool. I'm trying to upgrade my kernel version from 6.18.35-1-lts to 7.x. Do I need to rebuild a new image ...
Score of 1
1 answer
197 views

Every time that I need to build a specific Android Kernel, it restarts the whole build from scratch, ignoring absolutely all previously built objects. In other words, it doesn't matter if I had ...
Score of 0
2 answers
176 views

Pointers to userspace on x86_64 must start with 0b0000000, covering 7 of the 64 bits and leaving 57 for the actual pointer. Will a userspace program ever get a kernelspace pointer, or is it safe to ...
Score of 0
0 answers
61 views

I have a query about this question. If it's a 2.5 and 1.25 difference, then as per my checking, mod2 will not separate it manually; if it's with a step size of 1, then it can be solved by mod2. so how ...
Score of 0
0 answers
57 views

From what it seems the usage of workGroupFunctions in OpenCL kernels, e.g. work_group_scan_exclusive_add pushes the implementation of the underlying algorithm to the device (if it does indeed support ...
Score of 0
0 answers
68 views

I'm trying to learn exploitdev for fun. While researching cve-2023-20938 (android binder uaf), I encountered a barrier. I need to create binder_node in my process and get handle for that binder_node ...
Score of 0
1 answer
87 views

When loading using libbpf a BTF object that defines a probe on SEC("tracepoint/syscalls/sys_enter_execve") on an UML kernel (tested with 6.18.26), EINVAL is returned from __sys_bpf -> ...
Score of 0
0 answers
61 views

Maybe this seems stupid for somebody but, I need to register service in android to create binder_proc and binder_node in kernel side and I need to get handle for that binder_node in order to send ...
Score of 0
0 answers
194 views

What I have I have the beginning of a kernel that runs fine in QEMU from an ISO file that I custom made, but when booting that same ISO file in bare metal from Ventoy, the program crashes at mov cr0, ...
Score of 0
0 answers
48 views

I’m researching Android Binder vulnerabilities and need to observe how the reference counter of struct binder_node changes at runtime. Specifically, I want to verify whether the reference count is ...
Score of 0
0 answers
117 views

I’m not an expert in this area, I might be misunderstanding some fundamentals. I’m using Genymotion to emulate Android , while researching some Android kernel CVEs, I need to analyze kernel ...
Score of 0
1 answer
168 views

I am writing my own i386 bootloader in Real Mode (org 0x7C00) that is supposed to switch to Protected Mode. I am currently trying to output two characters with int 0x10 to debug, but only the first ...
Score of 0
0 answers
163 views

looking for advice on a workflow problem rather than a specific library issue. The situation I have a notebook that: Installs packages via pip in Cell 1 # REVISED CELL 1 import subprocess, sys # ...
Score of 3
1 answer
78 views

I am trying to reach the wake_up_interruptible() call within netlink_setsockopt() in Linux kernel 3.16. However, I’ve noticed that the code path is only reached depending on the optlen I provide. When ...
Score of 1
1 answer
124 views

While researching for different kernel exploits I need offset to particular value in struct, e.g: portid offset to netlink_sock. I found a tool called pahole to do exactly that job. pahole -E ...

15 30 50 per page
1
2 3 4 5
…
625