Unverified50% confidenceFactExact time
AF_UNIX 套接字操作在默认的容器配置下通常是允许的，不需要特权能力，非特权容器内的普通进程即具备触发该漏洞的前提条件
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/13/2026
First Seen
Valid until: 11/11/2026
Sources
Related Claims
UnverifiedDeno uses a permission sandbox mechanism where, by default, code cannot access files, the network, or the environment, and permissions must be granted via explicit command-line flags such as --allow-net and --allow-read.68% similarUnverified由于文件描述符传递，AF_UNIX 套接字之间可能构成循环引用，普通引用计数无法回收，因此 Linux 内核为 AF_UNIX 专门实现了垃圾回收器62% similarUnverifiedstack-UAF 类 Linux 漏洞通常可导致权限提升、任意代码执行和拒绝服务59% similarUnverifiedCodeBuddy adopts a Trusted Folder mechanism that restricts AI tools to performing file operations only within directories explicitly authorized by the user.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/743155API
curl https://kongchang.com/api/v1/knowledge/claims/743155MCP
get_claim(id=743155)