Summary of linux kernel security protections and associated attacks

Linux kernel goes through rapid changes frequently. Unlike other platforms, Linux security features are not advertised enough and are limited to mail threads. Since Linux is getting more popular, it's important to be aware about protections it provides against sophisticated attacks targeting kernel.

Summary of linux kernel security protections and associated attacks
1 min read

The user base of linux has increased exponentially in last few decades. As a byproduct, researchers and threat actors has started investing more time on finding issues in linux kernel. To keep up with the offensive work, the linux gurus have introduced many self protections across years to make it safe against different attacks. This generally helps malicious processes to compromise the linux kernel or escalate privilege of them.

In AVAR 2022, I have present about these security protection techniques present in linux kernel to give linux users and security professional idea on where linux kernel stands in terms of security. Since unlike Windows and MacOS, linux kernel features are not advertised enough plus the kernel goes through such rapid changes, it's very difficult to keep track of what things are there and what not. This motivates me to go for such research. The work is results of examining hundreds of commits merged on linux over years, so that there should be some content on internet that keep track of all the efforts linux developers did to protect the linux kernel. PS: Hopefully I will keep updating the content.