Conversation

Proof-of-Concept local root exploit for the double-free in Linux kernel DCCP implementation (CVE-2017-6074): github.com/xairy/kernel-e

Replying to

why do you need to run inside a namespace? haven't tried it yet but can't you create dccp sockets as a non-privileged user?

Replying to

You can, so namespace support is not technically required to exploit the bug, but it made things easier for two reasons:

Show replies

Replying to

Matches my prediction that public exploit will require unprivileged namespaces :)

Replying to

How widespread is support for DCCP in real world distros? Android kernels (for example) are usually compiled without it