mirror of
https://github.com/amnezia-vpn/amneziawg-linux-kernel-module.git
synced 2026-10-13 21:34:34 +00:00
[GH-ISSUE #267] LPE using OOB in <r -1> #148
Labels
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
amnezia-vpn/amneziawg-linux-kernel-module#148
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @And-oss on GitHub (Oct 10, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amneziawg-linux-kernel-module/issues/267
Hi! You recently fixed a bug related to improper validation of "junk" data. However, the original reporter missed a crucial detail: the bug allowed for an out-of-bounds (OOB) access in the kernel slab, which—with certain manipulations—could lead to privilege escalation. I would like to ask for your permission to file a CVE for your product or GIT security.