<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Kernel on 0xMatheuZ</title><link>https://matheuzsecurity.github.io/tags/kernel/</link><description>Recent content in Kernel on 0xMatheuZ</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Sun, 06 Sep 2026 00:00:00 -0400</lastBuildDate><atom:link href="https://matheuzsecurity.github.io/tags/kernel/index.xml" rel="self" type="application/rss+xml"/><item><title>Fileless ELF Execution via O_TMPFILE</title><link>https://matheuzsecurity.github.io/hacking/fileless-loader-bypassing-elastic-memfd/</link><pubDate>Sun, 06 Sep 2026 00:00:00 -0400</pubDate><guid>https://matheuzsecurity.github.io/hacking/fileless-loader-bypassing-elastic-memfd/</guid><description>O_TMPFILE creates anonymous inodes on real filesystems with no directory entry. Combine it with execveat(AT_EMPTY_PATH) and you get fileless ELF execution that looks nothing like memfd_create in telemetry.</description></item></channel></rss>