About Me

I am Henry Martin, a security researcher working on Linux kernel security, vulnerability research and blockchain security. I hunt bugs in the upstream kernel, reproduce real-world exploits, and write down what I learn.

To date I have contributed 32 upstream fixes to the Linux kernel, 22 of which were assigned CVEs, covering UAF, OOB and NULL-deref bugs across networking, tracing, wireless and driver subsystems.

Research Interests

🛡️ Kernel Security

Bug hunting in the upstream Linux kernel, Android GPU driver exploitation (Mali CVE-2023-48409), and kernel heap techniques (Cross-Cache, Dirty Pagetable, KSMA).

⛓️ Blockchain Security

Smart contract auditing and on-chain attack analysis (Solidity, Ethereum challenges).

🔍 Program Analysis & Fuzzing

Static analysis (NJU Software Analysis, CodeQL), symbolic execution (KLEE, angr) and fuzzing (AFL, UBfuzz).

Experience

JD Security · Dawn Lab (京东安全 獬豸实验室)
Security Research Intern
Tencent Security · Yunding Lab (腾讯安全 云鼎实验室)
Security Research Intern

Honors & Awards

CTF & Security Competitions
2024 GeekPwn AVSS · Final 🏆 Champion
2024 Qiangwang Mimic Defense Challenge · Works Track(强网拟态作品赛) 1st Prize
2024 JQCTF (京麒CTF) 3rd Prize
Blockchain Hackathons
2026 0G APAC Hackathon · Excellence Award 3,700 USDC
2026 GWDC Hackathon · 2nd Place 2,000 USD

Linux Kernel CVEs

Selected Writings

Android Kernel
Pixel 设备 Mali GPU 驱动漏洞的成因分析与完整利用链。
malipixeltlstream
Linux Kernel
vsock 子系统 UAF 漏洞的复现与提权利用。
linux kernelvsock
CTF · PWN
从 Cross-Cache 到页表劫持的内核利用技术梳理。
kernel heapuafpagetable
Series
IR、数据流分析、指针分析、Datalog、IFDS 全系列。
static analysispointer analysis

查看全部文章 →