https://blog.qife122.com/tags/io_uring%E6%BC%8F%E6%B4%9E/ Recent content in Io_uring漏洞 on 办公AI智能小助手 Hugo zh-cn qife Thu, 11 Sep 2025 18:37:47 +0800 https://blog.qife122.com/p/%E5%9F%BA%E4%BA%8E%E6%96%87%E4%BB%B6dirtycred%E7%9A%84%E5%AE%B9%E5%99%A8%E9%80%83%E9%80%B8%E6%96%B0%E6%96%B9%E6%B3%95/ Thu, 11 Sep 2025 18:37:47 +0800 https://blog.qife122.com/p/%E5%9F%BA%E4%BA%8E%E6%96%87%E4%BB%B6dirtycred%E7%9A%84%E5%AE%B9%E5%99%A8%E9%80%83%E9%80%B8%E6%96%B0%E6%96%B9%E6%B3%95/ <h1 id="基于文件dirtycred的容器逃逸新方法">基于文件DirtyCred的容器逃逸新方法</h1> <h2 id="相关io_uring组件介绍">相关io_uring组件介绍</h2> <h3 id="固定文件">固定文件</h3> <p>固定文件（或称直接描述符）可视为io_uring特定的文件描述符。io_uring维护对任何已注册文件的引用，以减少每次涉及文件的操作中文件描述符解析带来的额外开销；该引用仅在固定文件被注销或io_uring实例被销毁时释放。</p>