Navigation
Recherche
|
[$] Kernel support for hardware-based control-flow integrity
lundi 11 juillet 2022, 17:17 , par LWN.net
Once upon a time, a simple stack overflow was enough to mount a
code-injection attack on a running system. In modern systems, though, stacks are not executable and, as a result, simple overflow-based attacks are no longer possible. In response, attackers have shifted to control-flow attacks that make use of the code already present in the target system. Hardware vendors have added a number of features intended to thwart control-flow attacks; some of these features have better support than others in the Linux kernel.
https://lwn.net/Articles/900099/
|
56 sources (32 en français)
Date Actuelle
ven. 3 mai - 01:33 CEST
|