Elektrine lite

← Feed

@dotstdy@mastodon.social

Post #2531462

2026-05-10 16:33 UTC

https://cgit.freebsd.org/src/commit/sys/kern/kern_exec.c?id=8e8ddb05d07142e95cf84e32bf93b9ecb3f90283 get ur daily rust appreciation exploit. today it's a bsd!

Replies (2)

  • @dotstdy@mastodon.social 2026-05-10 16:49

    this vulnerability was i believe found by an llm (filtered by a human), then has a vibe coded root privilege exploit attached. it's mentioned as a "operator precedence bug" but I can't say I'd really categorize it that way. they messed up the write size calculation and it leads to a tremendous out-of-bounds write. you can fix it by changing precedence, but you can also fix it by changing a + to a -.

    Open ##2902042

  • @sperbsen@discuss.systems 2026-05-10 20:12

    @dotstdy@mastodon.social @wingo@mastodon.social More like Lisp-syntax appreciation day.

    Open ##2902048