Skip To Main Content
CC'ed here on Muck Rack

CC'ed here

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to CC'ed here’s profile

Articles by CC'ed here

Re: Linux kernel: KTLS + sockmap "Reverse Order" Use-After-Free / Data Corruption

|
By CC'ed here
| seclists.org
oss-sec mailing list archives From: xw x <v3rdant.xiang () gmail com> Date: Mon, 11 May 2026 12:45:45 +0800 I'm sorry I didn't fulfill my duties. Is there anything I need to do?
Open in Who Shared View Duplicates (2) Issue with article?

Linux kernel: KTLS + sockmap "Reverse Order" Use-After-Free / Data Corruption

|
By CC'ed here, "There should
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Thu, 7 May 2026 06:27:08 +0200 Hi, V3rdant, CC'ed here, brought this Linux kernel issue to linux-distros on March 18, and apparently also to s@k.o at about the same time, citing the (outdated) syzkaller "Reporting Linux kernel bugs" instructions: https://www.openwall.com/lists/oss-security/2026/05/03/2 So we immediately had a coordination problem, which V3rdant acknowledged: On Wed, Mar 18, 2026 at 10:28:23PM...
Open in Who Shared Issue with article?

MIT/Heimdal Kerberos credentials cache type FILE risks

|
By Raul Vega, CC'ed here, Trash" scenario
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Thu, 19 Feb 2026 02:14:38 +0100 Hi, Raul Vega, CC'ed here, sent the below AI-generated message to linux-distros on Feb 5, without disclosing the use of AI, yet correctly set the public disclosure date to "2026-02-18 (14-day embargo per linux-distros policy)" (or maybe the AI assistant did).
Open in Who Shared Issue with article?

Re: Linux kernel: eBPF vulnerabilities

|
By CC'ed here, PowerPc architectures
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Wed, 24 Sep 2025 04:22:56 +0200 Hi Van1sh, Do you have any update on these issues? Are you aware of any fixes? Also, do you have an answer to Demi Marie Obenour's question: On Sun, Aug 03, 2025 at 12:06:27AM -0400, Demi Marie Obenour wrote: Are these exploitable via *classic* BPF?
Open in Who Shared Issue with article?

Linux kernel: eBPF vulnerabilities

|
By CC'ed here, PowerPc architectures
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Sun, 3 Aug 2025 03:55:43 +0200 Hi, Van1sh, CC'ed here, brought a set of 11 Linux kernel eBPF subsystem vulnerabilities to the kernel security team and linux-distros at once on July 19.
Open in Who Shared Issue with article?

non-issues in dailyaidecheck script in Debian's packaging of AIDE

|
By CC'ed here
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Wed, 23 Jul 2025 00:13:28 +0200 Hi, Ho Ngoc Thien Phu, CC'ed here, reported to linux-distros a couple of ways to abuse "/usr/share/aide/bin/dailyaidecheck (shipped with AIDE 0.19.x in Debian and derivatives)" to run arbitrary commands, if the configuration file /etc/default/aide is writable by the attacker. However, that file is trusted input, it must not be writable by any attacker, and indeed by default it is not.
Open in Who Shared Issue with article?

Linux kernel: HFS+ filesystem implementation issues, exposure in distros

|
By CC'ed here, On Sun, Muhammed Hüsam Alzeyya
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 3 Jun 2025 04:59:19 +0200 Hi, Muhammed Hüsam Alzeyya, CC'ed here, (kind of) brought an issue in the Linux kernel's HFS+ filesystem implementation to s@k.o and linux-distros at once. This is against both Linux kernel's and linux-distros' current instructions, which ask to "notify the kernel security team first, wait for the fix, and only then notify linux-distros or oss-security".
Open in Who Shared View Duplicates (2) Issue with article?

Re: shell wildcard expansion (un)safety

|
By Steffen Nurpmeso, CC'ed here, Der Kragenbaer
| seclists.org
oss-sec mailing list archives From: Steffen Nurpmeso <steffen () sdaoden eu> Date: Thu, 07 Nov 2024 01:08:19 +0100 David A. Wheeler wrote in <F60236E0-F65A-4441-9E62-64EE55016B2C () dwheeler com>: |> On Nov 5, 2024, at 11:12 PM, Solar Designer <solar () openwall com> wrote: |> Alexander Hu, CC'ed here, sent a message titled "shell expansion bug" to |> the distros list and a few other distro security contacts and shell |> maintainers.
Open in Who Shared Issue with article?

Re: shell wildcard expansion (un)safety

|
By David A. Wheeler, CC'ed here
| seclists.org
oss-sec mailing list archives From: "David A. Wheeler" <dwheeler () dwheeler com> Date: Wed, 6 Nov 2024 10:44:55 -0500 On Nov 5, 2024, at 11:12 PM, Solar Designer <solar () openwall com> wrote: Alexander Hu, CC'ed here, sent a message titled "shell expansion bug" to the distros list and a few other distro security contacts and shell maintainers. The message described known and correct behavior (not a bug), even if unexpected by some and risky. ...
Open in Who Shared Issue with article?

shell wildcard expansion (un)safety

|
By Alexander Hu, Will Biden stop, on Fri, CC'ed here
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Wed, 6 Nov 2024 05:12:15 +0100 Hi, Alexander Hu, CC'ed here, sent a message titled "shell expansion bug" to the distros list and a few other distro security contacts and shell maintainers. The message described known and correct behavior (not a bug), even if unexpected by some and risky. This was pointed out in the resulting thread.
Open in Who Shared Issue with article?
Show More