Anderson Nascimento
@andersonc0d3.bsky.social
Director & Security Researcher @alleleintel.com Blog: https://blog.andersonc0d3.io
Treinamento de Exploração de Vulnerabilidades no Espaço do Kernel (Linux Kernel Exploitation) – Agosto 2026 allelesecurity.com.br/treinamento-...
Treinamento de Exploração de Vulnerabilidades no Espaço do Kernel (Linux Kernel Exploitation) - Agosto 2026
Treinamento de Exploração de Vulnerabilidades no Espaço do Kernel (Linux Kernel Exploitation) - Agosto 2026
allelesecurity.com.br
Esta é a última semana para realizar as inscrições. Pensando nisso, estamos oferecendo um desconto especial para pagamentos à vista. Aproveite esta chance, pois não há previsão para novas turmas!
* Acesso permanente ao grupo de discussão privado e exclusivo para alunos; * Suporte aos estudos por meio de acesso direto ao instrutor mesmo após o treinamento;
A qualidade e os benefícios serão os mesmos presentes em todos os nossos serviços: * Conteúdo atualizado com o que há de mais moderno em pesquisa e exploração de vulnerabilidades no kernel do Linux; * Treinamento totalmente prático (hands-on); * Aulas gravadas e disponibilizadas em até 24 horas;
Será mais um mês recheado de conteúdo de alto nível, unindo teoria e muita prática (mão na massa), em que iremos navegar desde o ecossistema até o gerenciamento de memória de um dos maiores softwares já criados.
Após o sucesso do treinamento de exploração de vulnerabilidades em binários, realizado em maio deste ano e no qual obtivemos 100% de satisfação no feedback dos alunos, na próxima semana iniciaremos nosso segundo treinamento do ano: exploração de vulnerabilidades no kernel do Linux.
RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600) seclists.org/oss-sec/2026...
oss-sec: RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)
seclists.org
Dnsmasq DNS Remote Heap Buffer Overflow blog.exodusintel.com/2026/07/20/d...
Dnsmasq DNS Remote Heap Buffer Overflow - Exodus Intelligence
By David Barksdale In this blog post, we discuss a heap buffer overflow vulnerability that we found in Dnsmasq. This vulnerability was fixed in version 2.92rel2 and 2.93 on 11 May 2026 and assigned CV...
blog.exodusintel.com
perf/x86/amd/brs: Fix kernel address leakage git.kernel.org/pub/scm/linu... perf/x86/amd/lbr: Fix kernel address leakage git.kernel.org/pub/scm/linu...
Making sure you're not a bot!
git.kernel.org
v1.127 is live! We're rolling out improvements to search over the coming weeks. You'll get more relevant results and more ways to find what you're looking for. The new "Filters" button lets you query and filter by keywords, people, date range, language and more. You can even share your searches!
Debugging with CHERI CHERI is designed to improve the security of both existing and future software. freebsdfoundation.org/our-work/jou...
Debugging with CHERI | FreeBSD Foundation
Debugging with CHERI CHERI is designed to improve the security of both existing and future software. John Baldwin CHERI is a new security-oriented processor technology. Applying principles from histor...
freebsdfoundation.org
FreeBSD has added the pdopenpid() system call. It is the FreeBSD equivalent of pidfd_open() on Linux. kern: add pdopenpid(2) github.com/freebsd/free... pdfork.2: document pdopenpid(2) github.com/freebsd/free... sys: add pdopenpid(2) reviews.freebsd.org/D57124
kern: add pdopenpid(2) · freebsd/freebsd-src@5c32aa7
Reviewed by: markj Tested by: pho Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D57124
github.com
vm.overcommit_memory=2 is always the right setting for servers ariadne.space/2025/12/16/v... vm.max_map_count growing steadily when vm.overcommit_memory is 2 #1328 github.com/jemalloc/jem...
vm.overcommit_memory=2 is always the right setting for servers
The Linux kernel has a feature where you can tune the behavior of memory allocations: the vm.overcommit_memory sysctl. When overcommit is enabled (sadly, this is the default), the kernel will typicall...
ariadne.space
rcd(8) - new service manager daemon for FreeBSD lists.freebsd.org/archives/fre...
rcd(8) - new service manager daemon
lists.freebsd.org
Now my issues are with FreeBSD and WiFi. I’ve tried FreeBSD 15.1 and 16-CURRENT. The network gets down after a while and the kernel crashes.
fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() git.kernel.org/pub/scm/linu...
Making sure you're not a bot!
git.kernel.org
Bug 221383 - ideapad_laptop: Fn hotkeys stop emitting after s2idle resume on IdeaPad Slim 3 14ARP10 (Ryzen 7735HS) bugzilla.kernel.org/show_bug.cgi... [PATCH v6 0/4] amd_pmc: Delay s2idle suspend for some devices lore.kernel.org/all/20260611...
Lawfare Archive: The Return of the Syrian Civil War shows.acast.com/lawfare/epis... Lawfare Daily: How Escalations in Lebanon May Prolong the Iran War, with Joel Braunold shows.acast.com/lawfare/epis...
Lawfare Archive: The Return of the Syrian Civil War | The Lawfare Podcast
shows.acast.com
Saab invests in Comand AI to strengthen European defence sector news.cision.com/saab/r/saab-...
Saab invests in Comand AI to strengthen European defence sector
Saab has announced a strategic investment of 11.1 MEUR for a 10% equity stake in Paris-based
news.cision.com
I wrote this post. As I mention in it, I’ve been using GDB almost daily for about 10 years, but I had never actually looked at its source code. I finally started digging into it to make sense of some quirky behaviors, and I ended up uncovering some fascinating details.
We started analyzing a classic case where GDB creates the illusion that code in writable memory is corrupted. We ended up discovering two interesting behaviors of GDB.
Did you know there's a way to hit a breakpoint without using hardware or software breakpoints? Or how GDB patches the binary to execute an instruction? Learn more about how GDB works under the hood. Why is my shellcode being corrupted? allelesecurity.com/why-is-my-sh...
Why is my shellcode being corrupted?
Explore the illusion GDB creates in Linux Binary Exploitation, uncovering issues with breakpoints and stack memory behavior in this detailed analysis.
allelesecurity.com
We started analyzing a classic case where GDB creates the illusion that code in writable memory is corrupted. We ended up discovering two interesting behaviors of GDB.
CVE-2026-45257: FreeBSD kTLS-RX in-place AES-GCM decrypt over sendfile(2) EXTPG mbufs to page-cache write / local root seclists.org/oss-sec/2026...
oss-sec: CVE-2026-45257: FreeBSD kTLS-RX in-place AES-GCM decrypt over sendfile(2) EXTPG mbufs to page-cache write / local root
seclists.org
[PATCH] target/i386: helper_sysret(): Check that RCX contains a canonical address when emulating an Intel CPU lore.kernel.org/qemu-devel/2...
E você, vai ficar de fora? Podemos fazer história novamente em nosso próximo treinamento de Exploração de Vulnerabilidades no Kernel do Linux.