{"uuid": "9f15a794-1a97-4689-bb81-0eb8ba18298e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38236", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1339", "content": "\u2728 General Cyber News \u2728\n\nFrom Chrome renderer code exec to kernel with MSG_OOB\n\n\u2014\n\nSummary:\nPosted by Jann Horn, Google Project ZeroIntroduction\n In early June, I was reviewing a new Linux kernel feature when I learned about the MSG_OOB feature supported by stream-oriented UNIX domain sockets. I reviewed the implementation of MSG_OOB, and discovered a security bug (CVE-2025-38236) affecting Linux >=6.9. I reported the bug to Linux, and it got fixed. Interestingly, while the MSG_OOB feature is not used by Chrome, it was exposed in the Chrome renderer sandbox. (Since...\n\n\u2014\n\nSource: Project Zero\nPublished: 2025-08-08 10:43 | Author: Google Project Zero (noreply@blogger.com)\n\n#general_cyber_news #renderer #chrome\n\nView Article", "creation_timestamp": "2026-09-10T00:00:24.232033Z"}