Top all-time · #18637
sam4k
Personal blog · sam4k.comsecuritysystems
sam4k is a personal blog at sam4k.com about security and systems. Since 2022, 4 different Hacker News readers have linked it 4 times, most often “ZDI-24-821: A Remote UAF in The Kernel's net/tipc”. It is still writing: the last post was on 2025-05-07, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers cite this security blog's 2022 post as evidence that kernel vulnerabilities should be disclosed to the linux-distros mailing list. The linked posts cover kernel vulnerability disclosure.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
blogging about pwning kernels and os internals
Most-linked posts?
- ZDI-24-821: A Remote UAF in The Kernel's net/tipc2 people · 2 mentions · first linked 2024-07-10
What Hacker News says?
> the reporter should not be the one responsible for reporting separately to every single downstream of the thing they found a vuln in. Not "separately to every single downstream", there is the "linux-distros" mailing list for disclosures: https://oss-security.openwall.org/wiki/mailing-lists/distros This random blogpost from 2022 serves as a proof that disclosing kernel vulnerabilities to the distros list is a well-…
Comment linking /a-dummys-guide-to-disclosing-linux-kernel-vulnerabilities/
on “CopyFail Was Not Disclosed to Distros”Submitted ZDI-24-821: A Remote UAF in The Kernel's net/tipc as a story · 4 points
HN discussionSubmitted ZDI-24-821: A Remote UAF in The Kernel's net/tipc as a story · 2 points
HN discussionSubmitted Patching, Instrumenting and Debugging Linux Kernel Modules as a story · 1 points
HN discussion