Linux LPE IPV6_FRAG_ESCAPE: a unprivileged container / jail escape PoC

[ADMIN]

The flaw sits in __ip6_append_data() and corrupts a packet’s own skb_shared_info. Affects CentOS 10 and RedHat

Blog: https://www.linkedin.com/pulse/ipv6fragescape-unprivileged-container-jail-escape-poc-oldani-xbewf

GitHub - sgkdev/ipv6_frag_escape: Linux LPE - Reliable Jail/Container Escape

Linux LPE - Reliable Jail/Container Escape . Contribute to sgkdev/ipv6_frag_escape development by creating an account on GitHub.

github.com