Linux Kernel Control-Flow Integrity Sup...

on YouTube ↗44m

" summary

Kernel CFI uses compiler‑emitted type tags: a 32‑bit type hash before function entry and a matching check just before each indirect call, with a traps on mismatch policy that can be made permissive for warnings. ARM and x86 offer hardware IBT/IBT‑like enforcement that can be combined with compiler checks by hot‑patching fineIBT to target bytes before entry, avoiding executable memory reads, improving speculative hardening and easing relaxed‑target handling. Clang support is upstreaming; GCC work is pending.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 14:57KCFI instrumentation
3. 18:06ARM Branch Target Identification (BTI)
4. 28:12IBT instrumentation

" related talks

• 45mControl Flow Integrity in the Linux KernelKees Cook · Linux Security Summit North America 2020
• 39mControl Flow Integrity in the Linux KernelKees Cook · linux.conf.au 2020
• 27mFiner-grained kernel control flow integrity and challengesDeepak Gupta · Linux Plumbers Conference 2025
• 01h 46mA little Introduction to Control Flow IntegrityJames McNellis · Meeting C++ 2025
• 58mFineIBT Enhanced: Hardening Linux’s Microarchitectural Security on X86S. Constable, S. Österlund · Linux Security Summit Europe 2025
• 35mControl Flow Integrity on RISC-V LinuxDeepak Gupta · Linux Security Summit North America 2024
• 01h 34mA Little Introduction to Control Flow Integrity in C++James McNellis · C++Now 2026
• 20mControl Flow Integrity on RISCVDeepak Gupta · Linux Plumbers Conference 2023