KaraZajac e01aa99ec6 af_packet2: fix uid_map (read uid/gid before unshare) — same bug as cgroup ...

af_packet2 read getuid()/getgid() AFTER unshare(CLONE_NEWUSER), so it wrote
"0 65534 1" to uid_map/gid_map (65534 = nobody, the initial unmapped id) and
the write was rejected EPERM — the userns-root mapping silently failed and the
CAP_NET_RAW primitive could not fire. Capture the outer uid/gid before unshare.

Audited every userns module for the pattern; only cgroup_release_agent (fixed
in 8c45b2b) and af_packet2 had it. Updated docs/EXPLOITED.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0118iUgHY44hdRtANgyCmu7y

2026-07-23 20:18:03 -04:00

..

.nojekyll

site: GitHub Pages landing page

2026-05-17 02:14:15 -04:00

app.js

release v0.9.9: install.sh needs no sudo + CVE metadata drift fix

2026-06-08 10:16:24 -04:00

ARCHITECTURE.md

core/host: shared host fingerprint refactor

2026-05-22 23:18:00 -04:00

CVE_METADATA.json

modules: add refluxfs (CVE-2026-64600, "RefluXFS" XFS reflink CoW ILOCK race)

2026-07-23 17:49:40 -04:00

DEFENDERS.md

rename: IAMROOT → SKELETONKEY across the entire project

2026-05-16 22:43:49 -04:00

DETECTION_PLAYBOOK.md

skeletonkey: --explain MODULE — single-page operator briefing

2026-05-23 10:49:46 -04:00

ETHICS.md

rename: IAMROOT → SKELETONKEY across the entire project

2026-05-16 22:43:49 -04:00

EXPLOITED.md

af_packet2: fix uid_map (read uid/gid before unshare) — same bug as cgroup

2026-07-23 20:18:03 -04:00

index.html

modules: add refluxfs (CVE-2026-64600, "RefluXFS" XFS reflink CoW ILOCK race)

2026-07-23 17:49:40 -04:00

JSON_SCHEMA.md

release: bump version to v0.6.0

2026-05-23 00:22:18 -04:00

KEV_CROSSREF.md

modules: add refluxfs (CVE-2026-64600, "RefluXFS" XFS reflink CoW ILOCK race)

2026-07-23 17:49:40 -04:00

LAUNCH.md

release v0.9.9: install.sh needs no sudo + CVE metadata drift fix

2026-06-08 10:16:24 -04:00

OFFSETS.md

rename: IAMROOT → SKELETONKEY across the entire project

2026-05-16 22:43:49 -04:00

og.png

docs: regenerate og.png with skeletonkey.netslum.io URL

2026-07-13 17:25:55 -04:00

og.svg

docs: regenerate og.png with skeletonkey.netslum.io URL

2026-07-13 17:25:55 -04:00

RELEASE_NOTES.md

refluxfs: drop the redundant standalone verify harness

2026-07-23 18:50:58 -04:00

style.css

README + site + binary: surface 22-of-26 VM-verified count

2026-05-23 18:03:38 -04:00

VERIFICATIONS.jsonl

cgroup_release_agent: fix uid_map (read uid pre-unshare) + add CLONE_NEWCGROUP

2026-07-23 20:15:51 -04:00