SecurityLobstersabout 2 hours ago
Linux AF_ALG Flaw Earns $113,337 Bounty
16 min read
Researcher Muhammad Alifa Ramdhan found CVE-2025-39964, an AF_ALG race condition in the Linux kernel present since around 2011. The bug lets an ordinary user gain root and escape a Docker container by overwriting core_pattern. Disclosed responsibly and submitted to Google's kernelCTF, it earned a $113,337 reward before Copy Fail drew wider attention to AF_ALG.
Level
Hype check
Tap to vote and see what everyone thinks.
