Linux kernel vulnerabilities

Haogang Chen, Yandong Mao, Xi Wang, Dong Zhou, Nickolai Zeldovich, M. Frans Kaashoek
2011 Proceedings of the Second Asia-Pacific Workshop on Systems - APSys '11  
Avoiding kernel vulnerabilities is critical to achieving security of many systems, because the kernel is often part of the trusted computing base. This paper evaluates the current state-of-the-art with respect to kernel protection techniques, by presenting two case studies of Linux kernel vulnerabilities. First, this paper presents data on 141 Linux kernel vulnerabilities discovered from January 2010 to March 2011, and second, this paper examines how well state-of-the-art techniques address
more » ... e vulnerabilities. The main findings are that techniques often protect against certain exploits of a vulnerability but leave other exploits of the same vulnerability open, and that no effective techniques exist to handle semantic vulnerabilities-violations of high-level security invariants.
doi:10.1145/2103799.2103805 dblp:conf/apsys/ChenMWZZK11 fatcat:3mwqsdizsrfdxayhpj5mhahavq