From Chrome renderer code exec to kernel with MSG_OOB
Google Project Zero found CVE-2025-38236, a use-after-free in the Linux kernel's MSG_OOB handling for stream-oriented UNIX domain sockets, affecting Linux 6.9 and later; the bug was reachable inside the Chrome renderer sandbox because the sandbox allowed...