eBPF JIT Compiler Internals: Understanding Constant Blinding Implementation

Deep dive into eBPF’s constant blinding mechanism - a security defense against JIT-spray attacks in the Linux kernel.

 · 16 min read

Novel approach to tackle UAF Bugs in the Linux Kernel

Analysis of dedicated bucket allocators as a novel mitigation technique for use-after-free vulnerabilities in the Linux kernel.