oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux Kernel Privilege Escalation Research Project Overview GhostLock CVE-2026-43499 is a kernel stack UAF vulnerability affecting Linux 2.6.39 through 7.1-rc1, triggered via a FUTEXCMPREQUEUEPI race condition. This project ports the x8664...

CyberMeowfia

Website: nebusec.ai · Twitter @nebusecurity · Bug list 885+ IonStack followup, follow https://github.com/NebuSec/CyberMeowfia/issues/44 Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel 📖 Writeup · 🐦 Twitter Longinus : ...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local privilege escalation exploiting CVE-2026-43499 — an rtmutex removewaiter bug that leaves a struct rtmutexwaiter dangling on the waiter's kernel stack kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapted from NebuSec/CyberMeowfia...

ghostlock

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

CyberMeowfia-ace3

Website: nebusec.ai · Twitter @nebusecurity · Bug list 885+ IonStack followup, follow https://github.com/NebuSec/CyberMeowfia/issues/44 Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel 📖 Writeup · 🐦 Twitter Longinus : ...

ghostlock-cve-2026-43499

CVE-2026-43499 GhostLock — ARM32 Kernel Privilege Escalation Research Linux kernel futex PI rtmutex Use-After-Free vulnerability research and exploit development targeting Huawei Watch 4 Pro MDS-AL00 , Snapdragon SW5100, armv7l, kernel 5.4.210. Vulnerability removewaiter in kernel/locking/rtmutex...

ASB-A-171705902

In fixuppistateowner of futex.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...