issues
search
KSPP
/
linux
Linux kernel source tree (Kernel Self Protection Project)
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project
Other
81
stars
5
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Get rid of CONFIG_HARDENED_USERCOPY_PAGESPAN
#163
kees
closed
2 years ago
3
Audit and replace calls to kvzalloc()/kzalloc() with its 2-factor multiplication argument form, kvcalloc()/kcalloc()
#162
GustavoARSilva
opened
2 years ago
1
Don't load modules as a single block of memory
#161
chleroy
opened
2 years ago
4
Audit open-coded instances and transform them with size_t saturating arithmetic helpers (size_mul, size_add, struct_size, array_size, flex_array_size, etc...)
#160
GustavoARSilva
opened
2 years ago
0
Evaluate bounded RNG uses for selection bias
#159
kees
opened
2 years ago
0
Limit kvmalloc sizes to INT_MAX
#158
kees
closed
2 years ago
1
Update lib/test_usercopy.c to catch argument side-effects
#157
kees
opened
2 years ago
0
Fix privileged struct tty_operations functions to use file-opener not capable()
#156
kees
opened
2 years ago
0
Provide "near overflow" API for refcount_t
#155
kees
opened
2 years ago
0
Set BPF region read-only before starting verification
#154
kees
opened
2 years ago
1
Remove CONFIG_HARDENED_USERCOPY_FALLBACK
#153
kees
closed
2 years ago
7
Enable -Wshadow=local
#152
kees
opened
2 years ago
2
Deal with object size mismatches seen with GCC 11.2 -Warray-bounds
#151
kees
closed
2 years ago
4
Add __alloc_size annotations to the skb allocators
#150
kees
opened
2 years ago
1
Disconnect seccomp and spectre mitigations
#149
kees
closed
2 years ago
1
Explore Clang's __builtin_dynamic_object_size
#148
kees
closed
6 months ago
3
Explore PAC for signing functions stored in the heap
#147
kees
opened
3 years ago
1
Enable -Wstringop-overread
#146
kees
closed
2 years ago
2
Deal with -Wstringop-overflow workarounds
#145
kees
opened
3 years ago
0
Enable -Wstringop-truncation
#144
kees
opened
3 years ago
1
Clean up all UBSAN object-size mismatches
#143
kees
closed
2 years ago
1
Implement CET in kernel
#142
kees
opened
3 years ago
3
Retire obsolete crypto
#141
ardbiesheuvel
opened
3 years ago
0
Replace open-coded skb->data casts with a bounds checking struct-size-aware API
#140
kees
opened
3 years ago
4
Refactor sysfs (really kernfs) to make "file" available for f_cred access
#139
kees
opened
3 years ago
1
keep slab allocations separate from page allocator allocations
#138
kees
opened
3 years ago
0
Double flex array at the end of struct
#137
GustavoARSilva
closed
2 years ago
2
constant string overflows lack compile-time warning since v5.11
#136
kees
closed
2 years ago
2
Can /proc/$pid/fdinfo/ leak across privilege changes
#135
kees
opened
3 years ago
0
Enable -Wrestrict
#134
kees
opened
3 years ago
3
Always zero stack variables
#133
kees
opened
3 years ago
0
Function-granular KASLR
#132
kees
opened
3 years ago
4
Prevent kprobes from “leaking” symbol addresses
#131
skitt
closed
3 years ago
3
Implement "write rarely" infrastructure
#130
kees
opened
3 years ago
2
Add LKDTM test for per-task stack canaries
#129
kees
closed
2 years ago
1
Examine eBPF exposures under CFI
#128
kees
opened
3 years ago
0
Enable -Wformat under Clang
#127
kees
opened
3 years ago
1
Explore performing taint-tracking of writes to kernel addresses that came from userspace
#126
kees
opened
3 years ago
0
pre-"case" switch variable declarations are not covered by -fauto-var-init
#125
kees
opened
3 years ago
0
randomize vmalloc() allocations
#124
kees
opened
3 years ago
0
randstruct: use cryptographic RNG
#123
kees
opened
3 years ago
0
randstruct: explicitly randomize padding holes
#122
kees
opened
3 years ago
0
Improve FORTIFY_SOURCE to detect intra-object overflows in string handling
#121
kees
closed
3 years ago
1
Replace one-element arrays with flexible-array members in UAPI
#120
kees
closed
3 years ago
2
Fix race conditions in /proc between execve() and ptrace_may_access()
#119
kees
opened
3 years ago
0
Fix race conditions between mm_exit() and ptrace_may_access() (i.e. dumpability)
#118
kees
opened
3 years ago
2
potential Yama bypasses via perf_event_open()
#117
kees
opened
3 years ago
0
follow up on UBSAN "shift out of range" reports
#116
kees
opened
3 years ago
0
Enable -Wimplicit-fallthrough for Clang
#115
GustavoARSilva
closed
2 years ago
8
af_alg sockaddr array size needs fixing
#114
kees
closed
3 years ago
1
Previous
Next