KaraZajac 3edad37184 docs: overlayfs_setuid debug outcome — kernel confirmed vulnerable, raw /dev/fuse fragile, use libfuse ...

Confirmed CVE-2023-0386 vulnerable on jammy 5.15.0-25.25 empirically (upstream
xkaneiki libfuse PoC pops root). Isolated the raw /dev/fuse port's failures:
overlay refuses a userns-mounted FUSE lowerdir (ENOSYS) so FUSE must be mounted
in the init ns via the setuid fusermount3 helper; got the fd-passing handshake +
mount working, but the server EINVALs on read after FUSE_INIT (non-blocking fd,
needs poll) and the flaky raw server repeatedly wedged/rebooted the VM. Raw
protocol reimplementation is fragile and can destabilise the target -> use
libfuse (proven, matches pack2theroot conditional-lib precedent). Ledger updated.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0118iUgHY44hdRtANgyCmu7y

2026-07-23 20:57:27 -04:00

..

.nojekyll

site: GitHub Pages landing page

2026-05-17 02:14:15 -04:00

app.js

release v0.9.9: install.sh needs no sudo + CVE metadata drift fix

2026-06-08 10:16:24 -04:00

ARCHITECTURE.md

core/host: shared host fingerprint refactor

2026-05-22 23:18:00 -04:00

CVE_METADATA.json

modules: add refluxfs (CVE-2026-64600, "RefluXFS" XFS reflink CoW ILOCK race)

2026-07-23 17:49:40 -04:00

DEFENDERS.md

rename: IAMROOT → SKELETONKEY across the entire project

2026-05-16 22:43:49 -04:00

DETECTION_PLAYBOOK.md

skeletonkey: --explain MODULE — single-page operator briefing

2026-05-23 10:49:46 -04:00

ETHICS.md

rename: IAMROOT → SKELETONKEY across the entire project

2026-05-16 22:43:49 -04:00

EXPLOITED.md

docs: overlayfs_setuid debug outcome — kernel confirmed vulnerable, raw /dev/fuse fragile, use libfuse

2026-07-23 20:57:27 -04:00

index.html

modules: add refluxfs (CVE-2026-64600, "RefluXFS" XFS reflink CoW ILOCK race)

2026-07-23 17:49:40 -04:00

JSON_SCHEMA.md

release: bump version to v0.6.0

2026-05-23 00:22:18 -04:00

KEV_CROSSREF.md

modules: add refluxfs (CVE-2026-64600, "RefluXFS" XFS reflink CoW ILOCK race)

2026-07-23 17:49:40 -04:00

LAUNCH.md

release v0.9.9: install.sh needs no sudo + CVE metadata drift fix

2026-06-08 10:16:24 -04:00

OFFSETS.md

rename: IAMROOT → SKELETONKEY across the entire project

2026-05-16 22:43:49 -04:00

og.png

docs: regenerate og.png with skeletonkey.netslum.io URL

2026-07-13 17:25:55 -04:00

og.svg

docs: regenerate og.png with skeletonkey.netslum.io URL

2026-07-13 17:25:55 -04:00

RELEASE_NOTES.md

refluxfs: drop the redundant standalone verify harness

2026-07-23 18:50:58 -04:00

style.css

README + site + binary: surface 22-of-26 VM-verified count

2026-05-23 18:03:38 -04:00

VERIFICATIONS.jsonl

docs: record overlayfs_setuid (FUSE port needed) + sudoedit_editor findings

2026-07-23 20:34:58 -04:00