Show HN: RustyTux – Linux kernel LPE exploiting an ESP-in-TCP race

Category: security

Tags: kernel-exploit, privilege-escalation, race-condition, security-research, linux

Score: 6.5/10 (Innovation: 7, Technical: 9, Documentation: 6, Utility: 4)

RustyTux is a Linux kernel local privilege escalation exploit for an ESP-in-TCP use-after-free race in strparser, complete with a prefetch-timing KASLR bypass and heap reclaim via user-key payloads. It stands out for its nontrivial race-condition engineering and detailed race timelines, though it targets a specific kernel build and requires manual porting.

Target audience: security researchers and kernel exploit developers

Repository: https://github.com/m0x41nos/RustyTux · C · 16 stars

View on Hacker News