Red Hot Cyber
Cybersecurity is about sharing.
Recognize the risk, combat it, share your experiences,
and encourage others to do better than you.
RHC Dark Lab : 25 June 2024 20:48
Recently, a security alert shaked the infosec environment: A malicious actor has announced the sale of Use After Free (UAF) 0-day vulnerability affecting the Linux Kernel on the well-known darknet forum BreachForum. The vulnerabilit permits high privileges code execution to low priviliged users, posing a serious threat to affected systems.
The vulnerability author specifies that the vulnerability affects the 6.6.15-amd64 version of the Linux Kernel. UAF occurs when the memory freed previously could be subsequently re-used allowing attackers to execute arbitrary code with High Privileges (Local Privilege Escalation), bypassing OS’s standard secuirty measures
In the post the exploit author state “selling 0day Use-after free in the Linux Kernel, you can use it to do a Privileged Code Execution ( LPE (Local Privilege Escalation), or execute code with root privileges ), ( Data Leakage )..etc”. The sell price of the vulnerability is fixed to 150.000 USD. The only payment method allowed is exclusively through Monero (XMR) or Bitcoin (BTC) cryptocurrency. The use of cryptocurrency is chosen to ensure transaction’s anonymity.
Iscriviti GRATIS ai WorkShop Hands-On della RHC Conference 2025 (Giovedì 8 maggio 2025)
Il giorno giovedì 8 maggio 2025 presso il teatro Italia di Roma (a due passi dalla stazione termini e dalla metro B di Piazza Bologna), si terranno i workshop "hands-on", creati per far avvicinare i ragazzi alla sicurezza informatica e alla tecnologia. Questo anno i workshop saranno:
Supporta RHC attraverso:
Ti piacciono gli articoli di Red Hot Cyber? Non aspettare oltre, iscriviti alla newsletter settimanale per non perdere nessun articolo.
The middle-man for the transaction is IntelBroker, a well known malicious actor, making payment easier for a potential buyer. Moreover the use of a trusted middle-man ensure trust and transparency for the involved parties although they still operate anonymously.
0-day marketplaces poses an important threat to cybersecurity on a global scale. System administrators and infosec professionals needs to be constantly aware and ready to apply security patch as soon as they become accessible to threat actors. The security community must collaborate to identify and mitigate such threats as quickly as possibile.
The uncover of this 0-day Linux Kernel vulnerability highlights once again the importance of computer security and the necessity to be aware from emerging dangers. The technology community must continue to invest in responsive security measures in order to safeguard systems and sensitive data from increasingly sophisticated attacks.
RHC Dark Lab