Rustproofing Linux (nccgroup)

The nccgroup blog is carrying afour-part series by Domen Puncer Kugler on how vulnerabilities can maketheir way into device drivers written in Rust.

In other words, the CONFIG_INIT_STACK_ALL_ZERO buildoption does nothing for Rust code! Developers must be cautious toavoid shooting themselves in the foot when porting a driver from Cto Rust, especially if they previously relied on this config optionto mitigate this class of vulnerability. It seems that kernel infoleaks and KASLR bypasses might be here to stay, at least, for alittle while longer.