PinTheft, new Linux LPE (Cannot replicate)

We are getting too close to the end of the week which means another Linux LPE released by v12-security.

PoC and explanation is here: pocs/pintheft at main · v12-security/pocs · GitHub

I haven’t been able to replicate it on 6.12 kernels on both Debian, Ubuntu or Rocky Linux

Supposedly needs CONFIG_RDS, CONFIG_RDS_TCP, CONFIG_IO_URING, kernel.io_uring_disabled=0.

Mitigation removes the modules from loading.

rmmod rds_tcp rds
printf 'install rds /bin/false\ninstall rds_tcp /bin/false\n' > /etc/modprobe.d/pintheft.conf

Will Dormann has a useful thread on getting the exploit to work.

Debian has a patch on Trixie-security: