⬇ Download holy card: ·
Saint DirtyCred Remastered, Who Swapped the Credentials
Patron of io_uring, the Unix socket garbage collector, and people who update the kernel only when it blows up.
Life
On 21 December 2022 Hacktive Security described the exploitation of CVE-2022-2602: a race between an io_uring request and the Unix socket garbage collector left an object used after it was freed. With the DirtyCred technique a low-privileged credentials structure was replaced with a privileged one, turning an ordinary user into root. David Bouman and Billy Jheng reported it; the fix landed in kernel 6.1.
Prayer
O Saint DirtyCred Remastered, who barters freed credentials for root's own, let our memory never be reused behind our backs. Amen.
How to celebrate
Celebrated by updating the kernel to at least 6.1 and treating io_uring with the respect it deserves.
A credential freed is a credential stolen.