A SpaceX Security Engineer Used AI to Find a 19-Year-Old Linux Bug That Gives Attackers Root (opens in new tab)

Covers CIFSwitch: A non-universal Linux local root vulnerability

CIFSwitch is a 19-year-old Linux logic bug turning forged CIFS auth keys into root. Affects Mint, CentOS, Rocky, Kali, SLES. CIFSwitch stands apart from typical privilege escalation vulnerabilities because of how it was discovered. Asim Manizada, a security engineer at SpaceX, didn’t find it by auditing source code the old-fashioned way. He built an AI-powered […]

Read the original article