X86/Pie: Make Kernel Image's Virtual Address Flexible
Talkat Open Source Summit Europe 2023 · on Wednesday, 2023-09-20· at 15:55· Room 0B (Floor 0), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
Describes converting the x86_64 Linux kernel into a Position Independent Executable (PIE) so the kernel image can be relocated to any virtual address instead of being constrained to the top 2GB. Covers implementation details of x86 kernel relocation and how to build and place the kernel (including below the top 2GB) to increase randomness and hinder code-reuse (ROP) attacks.
AI-written summary · about
related talks
01h 03mret2dir: Deconstructing Kernel Isolation
36mLost Control-Breaking Hardware-Assisted Kernel Control-Flow Integrity with Page-Oriented Programming
21m(Ab)using Linux as a Trusted Bootloader
43mAddress Space Isolation for Enhanced Safety of the Linux Kernel
50mMPK/PKS Linux Kernel Compartmentalization
45mBreaking and Protecting Linux Kernel Stack
44mMoRE Shadow Walker: The Progression of TLB-Splitting on x86
23mIMIX: In-Process Memory Isolation EXtension