Article 5J3T2 [$] Control-flow integrity in 5.13

[$] Control-flow integrity in 5.13

by
corbet
from LWN.net on (#5J3T2)
Among the many changes merged for the 5.13 kernel is support for the LLVMcontrol-flow integrity (CFI) mechanism. CFI defends against exploits byensuring that indirect function calls have not been redirected by anattacker. Quite a bit of work was needed to make this feature work wellfor the kernel, but the result appears to be production-ready and able todefend Linux systems from a range of attacks.
External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments