@solardiz

@Openwall founder, @oss_security maintainer, @lkrg_org co-author, @CtrlIQ Linux security engineer. RTs don't imply agreement with points of view.

openwall.com
Joined August 2012
  • Tweets14.5K
  • Following1.4K
  • Followers13.2K
24Media
Solar Designer retweeted
Hash Suite@HashSuiteOct 18
Hash Suite 4.1 (Windows): ~2.5x speedup on CPUs with AVX-512, SHA-NI. Support for MS Office encrypted files, Pcapng and Capng capture files. Import hashes by dropping/opening a supported file or passing it on the command line. UTF-8 support for usernames. hashsuite.openwall.net/downl…
2
3
526
A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill openwall.com/lists/oss-secur… bugs have been around for 10-21 years DirtyAH6 theoretically (unlikely/with difficulty) remote-groomable to remote root
5
1
16
2,304
22 recent Linux kernel CVEs with exploits brought to our attention by @nebusecurity openwall.com/lists/oss-secur…
1
10
27
2,845
OpenRGB: Remote System Compromise via Custom Network Protocol openwall.com/lists/oss-secur… Suite for controlling RGB LED lighting devices on Linux, MacOS, Windows. The daemon runs as root and implements a TCP networking protocol listening on wildcard IP 0.0.0.0 port 6742 by default.
1
3
1,139
Solar Designer retweeted
CIQ
@CtrlIQAug 11
Open weights made AI models accessible. OpenWALDO opens the foundation behind them. Founded by Gregory Kurtzer and sponsored by CIQ, the project is building a shared corpus of licensed, traceable training data and an AI BOM anyone can verify. Learn more and join the community: ow.ly/h6Ia50ZyCBO
3
10
428
CVE-2026-64561,Zapscape: Linux kernel: Guest-to-Host Escape in KVM/x86 openwall.com/lists/oss-secur… UAF in the shadow MMU emulation, specifically in the recursive "zap" path that runs when shadow pages are reclaimed. Exploit included.
4
8
1,061
CVE-2026-64564: Linux kernel: SCTP ASCONF transport UAF leading to local privilege escalation and container escape openwall.com/lists/oss-secur… Enterprise Linux distros blacklist the SCTP module by default by now
3
8
1,228
CVE-2026-64531,OVSwrap: Linux kernel: Local root vuln in Open vSwitch datapath openwall.com/lists/oss-secur… where: - OVS kernel datapath and conntrack/FTP-helper support are present, and - unprivileged user/network namespaces are enabled, or the attacker otherwise has CAP_NET_ADMIN
1
8
1,313
AI+manual analysis of all those Linux kernel CVEs and more by @kerneltoast from @CtrlIQ openwall.com/lists/oss-secur… "none of the 481 CVEs appear to be a true industry-wide emergency, with the caveat that some less-common setups are indeed at risk", a few "Most serious findings"
1
2
597
Declaring tweet bankruptcy: this account summarized almost every topic from the oss-security mailing list until July 22, 2026 inclusive, but not anymore. The manual tweets became more numerous lately and so negatively impacted other efforts. Further tweets will be very selective.
1
6
1,090
Solar Designer retweeted
Jonathan Brossard
@endrazineAug 7
Bugtraq Is Back: The Original Full Disclosure Mailing List Is Live Again 👹👹👹 #Defcon34 #Bugtraq #FullDisclosure @defcon @vxunderground @troyhunt @thegrugq @solardiz @thedarktangent @richinseattle @phrack @bsdaemon @nudehaberdasher @chompie1337 @schneierblog @halvarflake @gadievron @robertgraham securityledger.com/2026/08/b…
Bugtraq is Back !

ALT Bugtraq is Back !

3
21
3
51
9,976
Solar Designer retweeted
CIQ
@CtrlIQAug 6
Your fleet should change when your team decides, not when an upstream repository does. Meet CIQ Enterprise Linux Manager (ELM), included with all RLC Pro subscriptions. Approve, test, and roll forward or back, even in disconnected environments. Available today: ow.ly/kh8T50Zx7ns
3
7
367
CVE-2026-43499,GhostLock: Linux kernel: Stack-UAF and LPE via futex in kernels 2.6.39 till 7.1 openwall.com/lists/oss-secur… Other recent futex bugs CVE-2026-23415, CVE-2026-31554, CVE-2026-52973 openwall.com/lists/oss-secur… All 4 have same CVSS 7.8 per kernel CNA xitter.cf/nebusecurity/status/20…
NebuSec
@nebusecurityJul 8
GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below
10
26
4,155
CVE-2026-43503: Linux kernel: Analysis of the "DirtyClone" LPE (Dirty Frag family variant) openwall.com/lists/oss-secur… Dirty Frag, Fragnesia, DirtyClone trick the kernel into treating read-only, file-backed page cache memory as writable network buffers xitter.cf/JFrogSecurity/status/2…
JFrog Security
@JFrogSecurityJun 25
🚨 Successful PoC for Linux Kernel CVE-2026-43503 (DirtyFrag variant) 🚨 JFrog researchers successfully developed a privilege escalation exploit for CVE-2026-43503, a newly discovered DirtyFrag variant we dubbed "DirtyClone". The vulnerability was patched and merged into mainline Linux on May 21 (v7.1-rc5, commit 9e171fc1d7d7). Make sure your systems are up to date. Read the full technical writeup: research.jfrog.com/post/diss…
11
67
8,760
CVE-2026-53359,Januscape: Linux kernel: Guest-to-Host Escape in KVM/x86 openwall.com/lists/oss-secur… UAF in the shadow MMU emulation. When /dev/kvm is 666, also local root. Was successfully used as a 0-day exploit in Google kvmCTF. By Hyunwoo Kim also known for discovering Dirty Frag.
4
5
1,452
OpenSSH 10.4 released openwall.com/lists/oss-secur… Contains 8 security fixes without CVEs yet. 5 in sshd (nothing major), 1 each in sftp, scp, ssh. Linux seccomp sandbox hardening. Experimental support for a composite post-quantum signature scheme that combines ML-DSA 44 and Ed25519.
Open Source Security mailing list@oss_securityApr 3
OpenSSH 10.3 released openwall.com/lists/oss-secur… Many security-related improvements, nothing labeled as a vulnerability fix
1
7
1,273
libssh2: CVE-2026-55200 (critical), CVE-2025-15661 (high), CVE-2026-55199 (high) openwall.com/lists/oss-secur… libssh2 CVE-2026-55200 PoC and local RCE scaffold openwall.com/lists/oss-secur…
2
7
1,101
Common PKCS#7 / CMS parsing issues in OpenSSL, WolfSSL, Bouncy Castle, & GnuPG openwall.com/lists/oss-secur… accepting the sender provided length for the authentication tag [...] allowing an attacker to specify a one-byte tag RFC 5084: "a length of 12 octets is RECOMMENDED."
Calif
@calif_ioJun 17
How to format a ciphertext open.substack.com/pub/calif/…
1
2
883
CVE-2026-47729 Squidbleed leaks internal memory from Squid Proxy, "root cause was a misunderstanding of what the C standard requires: strchr(w_space, '\0') returns non-NULL per C11 §7.24.5.2 (terminating NUL is part of the string)." openwall.com/lists/oss-secur… xitter.cf/calif_io/status/206769…
Calif
@calif_ioJun 18
We sent Claude Mythos Preview spelunking through Squid’s guts, and it surfaced clutching a 29-year-old bug. Meet Squidbleed: a Heartbleed-style vulnerability that leaks internal memory from every version of Squid Proxy, in its default configuration. Full story: blog.calif.io/p/squidbleed-c…
2
5
1,275
OpenBSD sppp_pap_input: PAP authentication bypass openwall.com/lists/oss-secur… PAP Auth-Request with name_len=0 and passwd_len=0 authenticates the peer without any knowledge of the configured username or password. Kernel heap over-read via the same root cause. Fixed in -current.
1
7
779
Load more