Post #2902042
2026-05-10 16:49 UTC
this vulnerability was i believe found by an llm (filtered by a human), then has a vibe coded root privilege exploit attached. it's mentioned as a "operator precedence bug" but I can't say I'd really categorize it that way. they messed up the write size calculation and it leads to a tremendous out-of-bounds write. you can fix it by changing precedence, but you can also fix it by changing a + to a -.
Replies (3)
-
@oblomov@sociale.network 2026-05-10 16:52
@dotstdy@mastodon.social or by precomputing the source pointer instead of recomputing it twice
-
@tnorinder@mastodon.gamedev.place 2026-05-10 19:20
@dotstdy@mastodon.social honestly shocked this could make it into a kind-of mainstream operating system kernel. It is so obviously wrong.
-
@fanf@mendeddrum.org 2026-05-11 00:09
@dotstdy@mastodon.social the context in the “fixes” link makes it look to me like it was caused by deleting the () by mistake when cleaning up some code duplication https://cgit.freebsd.org/src/commit/sys/kern/?id=f373437a01a3