Free Software Hacker
he/him
@kees@fosstodon.org
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Kees Cook
Re: Logic bug in the Linux kernel's __ptrace_may_access() function
oss-sec mailing list archives From: Qualys Security Advisory <qsa () qualys com> Date: Wed, 20 May 2026 15:46:05 +0000 Qualys Security Advisory Logic bug in the Linux kernel's __ptrace_may_access() function (CVE-2026-46333) ======================================================================== Contents ======================================================================== Summary Analysis Case study: chage Case study: ssh-keysign Case study: pkexec Case study: accounts-daemon...
Intel, Facing Mass Layoffs (Including Many Key Engineers Who Work on Linux Kernel), is Pushing for Slop Inside Linux
Intel, Facing Mass Layoffs (Including Many Key Engineers Who Work on Linux Kernel), is Pushing for Slop Inside Linux posted by Roy Schestowitz on Nov 17, 2025, updated Nov 17, 2025 Linux and slop were debated in LWN several times recently. GAFAM et al were lobbying to externalise costs by offloading to LLMs, replacing proper, well-tested code (and documentation thereof) with slop.
Eric's Ultimate Solitaire CD
A collection of many popular and not-so-popular solo card games. This is more than just a solitaire game, with detailed images, and event-based sounds. The player can choose from 23 different games, and keep information on game play (success, failure, speed).
Unreal Tournament
Unreal Tournament is completely different from Unreal: it is now mainly based on multiplayer, like Quake 3. At the beginning, you have to play classic deathmatch rounds. After you have successfully won some of them, a new game mode becomes available, domination. In domination there are about three or four different areas scattered around the map to be controlled by your team. For a certain amount of seconds you control one area, a point is added to your score.
[PATCH v10 00/15] Function Granular KASLR
linux-kernel.vger.kernel.org archive mirror help / color / mirror / Atom feed From: Alexander Lobakin <alexandr.lobakin@intel.com> To: linux-hardening@vger.kernel.org, x86@kernel.org Cc: Alexander Lobakin <alexandr.lobakin@intel.com>, Borislav Petkov <bp@alien8.de>, Jesse Brandeburg <jesse.brandeburg@intel.com>, Kristen Carlson Accardi <kristen@linux.intel.com>, Kees Cook <keescook@chromium.org>, Miklos Szeredi <miklos@szeredi.hu>, Ard Biesheuvel <ardb@kernel.org>, Tony Luck...
require argv[0] presence in do_execveat_common()
linux-kernel.vger.kernel.org archive mirror help / color / mirror / Atom feed [PATCH] fs/exec: require argv[0] presence in do_execveat_common() @ 2022-01-26 4:39 Ariadne Conill From: Ariadne Conill @ 2022-01-26 4:39 UTC (permalink / raw) To: linux-kernel Cc: linux-fsdevel, Eric Biederman, Kees Cook, Alexander Viro, Ariadne Conill The first argument to argv when used with execv family of calls is required to be the name of the program being executed, per POSIX.
[PATCH] x86: Remove a.out support
linux-kernel.vger.kernel.org archive mirror help / color / mirror / Atom feed From: Borislav Petkov <bp@alien8.de> To: X86 ML <x86@kernel.org> Cc: Arnd Bergmann <arnd@arndb.de>, Eric Biederman <ebiederm@xmission.com>, Kees Cook <keescook@chromium.org>, LKML <linux-kernel@vger.kernel.org> Subject: [PATCH] x86: Remove a.out support Date: Thu, 13 Jan 2022 17:01:15 +0100 [thread overview] Message-ID: <20220113160115.5375-1-bp@alien8.de> (raw) From: Borislav Petkov <bp@suse.de> Commit eac616557050...
linux-distros membership adjustment/vouching
oss-sec mailing list archives By Date By Thread linux-distros membership adjustment/vouching From: Kees Cook <kees () ubuntu com> Date: Fri, 10 Jan 2020 12:52:41 -0800 Hello! I've been a member of linux-distros for a long while, and my hat has slowly changed over that time. I'm subscribed there (and here) as kees () ubuntu com.
Security fixes from Android 10 release which are relevant outside the Android ecosystem?
oss-sec mailing list archives By Date By Thread Re: Security fixes from Android 10 release which are relevant outside the Android ecosystem? From: Kees Cook <kees () ubuntu com> Date: Thu, 7 Nov 2019 10:28:04 -0800 On Fri, Oct 25, 2019 at 11:23:09PM +0200, Moritz Mühlenhoff wrote: Android advisories used to contain commit references to AOSP change sets, but that's not the case for https://source.android.com/security/bulletin/android-10.
Linux Kernel Defence Map
oss-sec mailing list archives Re: Linux Kernel Defence Map From: Kees Cook <keescook () chromium org> Date: Thu, 5 Apr 2018 12:20:24 -0700 On Thu, Apr 5, 2018 at 5:32 AM, Alexander Popov <alex.popov () linux com> wrote: On 05.04.2018 01:17, Kees Cook wrote: (I think "info leaks" and "finding kernel objects" may need some kind of clarifying language for how they're different) Info Exposure is a vulnerability (red node). STACKLEAK, PAGE_POISONING, etc mitigate this kind of bugs.
Linux Kernel Defence Map
oss-sec mailing list archives Re: Linux Kernel Defence Map From: Kees Cook <keescook () chromium org> Date: Thu, 5 Apr 2018 16:55:49 -0700 On Thu, Apr 5, 2018 at 4:38 PM, Alexander Popov <alex.popov () linux com> wrote: On 05.04.2018 22:20, Kees Cook wrote: On Thu, Apr 5, 2018 at 5:32 AM, Alexander Popov <alex.popov () linux com> wrote: On 05.04.2018 01:17, Kees Cook wrote: "type confusion" seems weird to me, but I haven't spent a lot of time weighing the options of the naming of these things.
Linux Kernel Defence Map
From: Kees Cook Date: Wed, 4 Apr 2018 15:17:11 -0700 On Wed, Apr 4, 2018 at 9:15 AM, Alexander Popov wrote: Linux kernel security is a very complex area. It would be nice to have some graphical representation of its current state. So I've created a Linux Kernel Defence Map showing the relations between: - vulnerability classes / exploitation techniques, - kernel defences, - bug detection means.
CVE-2017-5123 Linux kernel v4.13 waitid() not calling access_ok()
From: Kees Cook Date: Thu, 12 Oct 2017 13:02:40 -0700 Hi, Chris Salls discovered that when the waitid() syscall in Linux kernel v4.13 was refactored, it accidentally stopped checking that the incoming argument was pointing to userspace. This allowed local attackers to write directly to kernel memory, which could lead to privilege escalation.
CoreOS membership to linux-distros (updated)
From: Kees Cook Date: Tue, 18 Jul 2017 14:59:57 -0700 On Tue, Jul 18, 2017 at 2:56 PM, Euan Kemp wrote: 9.
Re: kernel: fs.suid_dumpable=2 privilege escalation
I didn't seek a CVE for this at the time since it requires a pretty specific combination of configurations. Namely: setting dumpable=2 without a dump handler, which I couldn't find any distro doing. I have no objection, of course. -Kees -- Kees Cook Chrome OS Security
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Kees
Contact Kees, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack