A threat actor is allegedly selling 0-Day UAF in the Linux Kernel on a dark web forum. According to the post this 0-Day can be used to do a privileged code execution. The post states that the affected version is 6.6.15-amd64.
In the post, the price for the alleged 0-Day is also included which is 150k USD and the threat actor is accepting Monero or BTC for the payments. Those willing to buy have to provide that they have sufficient funds when messaging the threat actor.
No additional contact information is provided. Another threat actor under the alias IntelBroker is stated as the middleman in the post.
The post Alleged Linux 0-Day Published on a Dark Web Forum appeared first on Daily Dark Web.