CVE-less vulnerabilities

Posted Jun 26, 2019 0:35 UTC (Wed) by scientes (guest, #83068)
Parent article: CVE-less vulnerabilities

The Linux Kernel benefits on its backwards compatibility goals by having extremely clear boundaries between kernel and user-land, which are based in hardware reality.

CVE-less vulnerabilities

Posted Jun 26, 2019 11:27 UTC (Wed) by gus3 (guest, #61103) [Link] (1 responses)

Until you add QEMU and hypervisors to the mix.

CVE-less vulnerabilities

Posted Jun 26, 2019 12:12 UTC (Wed) by roc (subscriber, #30627) [Link]

And BPF and tracepoints and ioctls...

But it's true that the kernel at least has the power to enforce constraints on user-space, whereas it's very difficult for user-space applications to protect themselves from other software. *cough* antivirus *barf*