Article 5XQ0W [$] Indirect branch tracking for Intel CPUs

[$] Indirect branch tracking for Intel CPUs

by
corbet
from LWN.net on (#5XQ0W)
"Control-flow integrity" (CFI) is a set of technologies intended to preventan attacker from redirecting a program's control flow and taking it over.One of theapproaches taken by CFI is called "indirect branch tracking" (IBT); itspurpose is to prevent an attacker from causing an indirect branch (afunction call via a pointer variable, for example) to go to an unintendedplace. IBT for Intel processors has been under development for some time;after an abrupt turn, support for protecting the kernel with IBT has beenmerged for the upcoming 5.18 release.
External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments