Linux Kernel Hardening Techniques
summary
Describes kernel hardening work that integrates memory leak detectors, AddressSanitizer-like instrumentation, and compiler-based instrumentation into the Linux kernel. Shows actual patches and runtime hooks, explains which kernel subsystems they affect, demonstrates concrete fixes (finding a dangling pointer and closing a leak that crashed a driver), and covers performance costs, required configuration switches, and which fixes have landed upstream to reduce reproducible device and graphics crashes.
AI-written summary · about
chapters (10)
- 0:00Kernel hardening intro
- 3:55What is kernel hardening
- 7:28Common kernel security issues
- 12:49Memory protection mechanisms
- 18:28Runtime detection tools
- 25:22Case studies & examples
- 31:53Compiler security support
- 36:05Graphics security
- 39:13Future developments & best practices
- 40:41Summary & Q&A
related talks
29mThwarting Unknown Bugs: Hardening Features in the Mainline Linux Kernel
35mDoes Making the Kernel Harder Make Making the Kernel Harder?
35mUpstream Kernel Hardening: Recent Progress and Challenges
52mKernel Hardening: Ten Years Deep
38mKernel Hardening: Protecting the Protection Mechanisms
20mHardening Linux guest kernel for CC
01h 02mLinux Kernel Security: Theory and Practice
06mQ&A