RSSAmplifier

Blog

Hey, it's Asim

Recent content on Hey, it's Asim

heyitsas.imRSS feed ↗4 posts

Latest posts

OVSwrap: another Linux local root vulnerability

TLDR: OVSwrap (CVE-2026-64531) is a non-universal (but broad) Linux LPE found by giving LLMs the tools to reason through memory safety issues’ geometry (coupled with CIFSwitch -discovery-style graph reasoning tools). Read on for affected distros, mitigations, and vulnerability details. 

 Background
 
 
 
 # 
 
 
 
 In CIFSwitch , we gave models the…

CIFSwitch: a non-universal Linux local root vulnerability

TLDR: CIFSwitch (CVE-2026-46243) is a distro-specific Linux LPE found by harnessing LLMs into better multihop knowledge composition. Read on for affected distros, mitigations, and vulnerability details. 

 Background
 
 
 
 # 
 
 
 
 In Getting LLMs Drunk to Find Remote Linux Kernel OOB
Writes (and More) ,
I’d mentioned how improving…

Getting LLMs Drunk to Find Remote Linux Kernel OOB Writes (and More)

TLDR: the grossly overengineered, self-orchestrating team of vulnerability-hunting agents detailed below has discovered 20+ CVEs over the past few months, including CVE-2026-31432 and CVE-2026-31433 : two remote, unauthenticated OOB writes in the Linux kernel’s ksmbd . Read on for the details of the setup that achieved this, including – yes! – getting LLMs drunk. 

…

Spooler Alert: Remote Unauth'd RCE-to-root Chain in CUPS

TLDR: my self-orchestrating team of vulnerability hunting agents discovered two issues in CUPS, CVE-2026-34980 and CVE-2026-34990 , chainable into unauthenticated remote attacker -> unprivileged RCE -> root file (over)write . See below for the prerequisites, details, and mitigation options. 

 Intro
 
 
 
 # 
 
 
 
 CUPS is the standard way to do printing on…