[$] Shielding running kernels against exploits with BPF

Cisco has some unusual challenges when it comes to deploying security patchesacross the company's many devices running custom kernels. John Fastabend spokeabout his work preventing exploits with BPF at the 2026Linux Storage,Filesystem, Memory-Management, and BPF Summit.The technique could substantially reduce the time necessary to respond to kernelvulnerabilities, but it will not be fully effective unless more hooks are addedto the kernel.