kernel-hardening
1,876 threads 22,023 messages Latest
About Archive
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
- RFC v3 Case Study Verification Results and Request for Reconsideration 0 replies
- CVE-2024-0582: Why We Need a Standard for CVE Emergency Mitigation 2 replies
- kaf: CVE Emergency Mitigation Policy Standard Specification 1 reply
- Kernel API Firewall (kaf): emergency CVE mitigation via loadable policy modules (with pre-disclosure defense appendix) 0 replies
- Kernel API Firewall (kaf): emergency CVE mitigation via loadable policy modules 0 replies
- Kernel API Firewall (kaf): subsystem-level attack surface reduction for the post-AI-CVE era 10 replies
- TID v2.0: kernel module for cache-line zeroization against Flush+Reload (CLFLUSHOPT + LFENCE + REP STOSQ) 5 replies
- TID Protocol — Hardware-Level Cache Security Research | Website Now Live 0 replies
- Linux Security Summit Europe 2026 CfP 0 replies
- TID v2.0: kernel module for cache-line zeroization against Flush+Reload (CLFLUSHOPT + LFENCE + REP STOSQ) 0 replies
- Linux Security Summit 2026 CfP 0 replies
- Slab allocator hardening and cross-cache attacks 1 reply
- Add O_DENY_WRITE (complement AT_EXECVE_CHECK) In review 35 replies
- fs: Add O_DENY_WRITE 1 reply
- x86: text_poke() fixes and executable lockdowns In review 8 replies
- abusing CONFIG_RANDOMIZE_KSTACK_OFFSET to assist with exploitation 0 replies
- uprobes are destructive but exposed by perf under CAP_PERFMON Applied 2 replies
- Fix late DMA unmap crash for page pool Superseded 15 replies
- Linux Security Summit North America 2025 CfP 3 replies
- hamradio: baycom: replace strcpy() with strscpy() Applied 1 reply
- x86: In x86-64 barrier_nospec can always be lfence Superseded 6 replies
- x86: In x86-64 barrier_nospec can always be lfence New 0 replies
- thermal/debugfs: change kzalloc to kcalloc In review 2 replies
- sched/topology: change kzalloc to kcalloc In review 2 replies
- ASoC: q6dsp: q6apm: change kzalloc to kcalloc In review 2 replies
- NFSv4: harden nfs4_get_uniquifier() function In review 1 reply
- scsi: cxlflash: change kzalloc to kcalloc In review 1 reply
- Script execution control (was O_MAYEXEC) In review 5 replies
- clk: ti: use kcalloc() instead of kzalloc() Applied 1 reply
- sched/topology: change kzalloc to kcalloc Superseded 0 replies
- dm: change kzalloc to kcalloc In review 1 reply
- thermal/debugfs: change kzalloc to kcalloc Superseded 0 replies
- thermal/debugfs: change kzalloc to kcalloc Superseded 0 replies
- Help Needed: Debugging Memory Corruption results GPF 1 reply
- Script execution control (was O_MAYEXEC) Superseded 6 replies
- Script execution control (was O_MAYEXEC) Superseded 18 replies
- Page Detective In review 36 replies
- Script execution control (was O_MAYEXEC) Superseded 10 replies
- Script execution control (was O_MAYEXEC) Superseded 96 replies
- PKS write protected page tables In review 20 replies
- CFP: Linux Security Summit Europe 2024 0 replies
- CFP: Linux Security Summit North America 2024 0 replies
- Landlock: IOCTL support Superseded 25 replies
- Isolating abstract sockets 17 replies
- Restrict access to TIOCLINUX In review 11 replies
- slub: Introduce CONFIG_SLUB_RCU_DEBUG In review 5 replies
- Restrict access to TIOCLINUX Superseded 2 replies
- Kernel hardening project suggestion: Normalizing ->ctor slabs and TYPESAFE_BY_RCU slabs 8 replies
- Restrict access to TIOCLINUX In review 12 replies
- sysctl: add config to make randomize_va_space RO In review 9 replies