Skip to content

kernelCTF: add CVE-2026-23209_cos #368

Open
4ab48b3f1ded2472 wants to merge 3 commits intogoogle:masterfrom
4ab48b3f1ded2472:CVE-2026-23209
Open

kernelCTF: add CVE-2026-23209_cos #368
4ab48b3f1ded2472 wants to merge 3 commits intogoogle:masterfrom
4ab48b3f1ded2472:CVE-2026-23209

Conversation

@4ab48b3f1ded2472
Copy link
Copy Markdown
Contributor

No description provided.

@matrizzo
Copy link
Copy Markdown
Collaborator

Hi, it looks like your exploit doesn't build on the CI, can you fix that?

@4ab48b3f1ded2472
Copy link
Copy Markdown
Contributor Author

The debug build issue was caused by the bug in the build system (6226291
) which is now fixed, so triggering recheck should solve that.
Not sure what is going on with vuln verify.

@matrizzo matrizzo added the recheck Triggers kernelCTF PR verification again label Apr 24, 2026
@matrizzo
Copy link
Copy Markdown
Collaborator

Hmm it looks like vuln-verify is failing because applying a patch changes the kernel's version number and kernelXDK doesn't have that kernel version in the database anymore so it throws an error.

Found 0xffffffff81000000
Using kernel base: 0xffffffff81000000
0xffff888000000000: 251
Found 0xffff888000000000
Using page_offset_base 0xffff888000000000
terminate called after throwing an instance of 'ExpKitError'
  what():  Target not found: Linux version 6.19.0-rc7+ (runner@runnervmeorf1) (gcc (Ubuntu 13.3.0-6ubuntu2~24.04.1) 13.3.0, GNU ld (GNU Binutils for Ubuntu) 2.42) #2 SMP PREEMPT_DYNAMIC Fri Apr 24 15:47:19 UTC 2026

@koczkatamas any idea how we can fix this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

recheck Triggers kernelCTF PR verification again

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants