KSPP linux issues - Githubissues

KSPP / linux

Linux kernel source tree (Kernel Self Protection Project)

https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project

Other

81 stars 5 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Get rid of CONFIG_HARDENED_USERCOPY_PAGESPAN

#163 kees closed 2 years ago
3
Audit and replace calls to kvzalloc()/kzalloc() with its 2-factor multiplication argument form, kvcalloc()/kcalloc()

#162 GustavoARSilva opened 2 years ago
1
Don't load modules as a single block of memory

#161 chleroy opened 2 years ago
4
Audit open-coded instances and transform them with size_t saturating arithmetic helpers (size_mul, size_add, struct_size, array_size, flex_array_size, etc...)

#160 GustavoARSilva opened 2 years ago
0
Evaluate bounded RNG uses for selection bias

#159 kees opened 2 years ago
0
Limit kvmalloc sizes to INT_MAX

#158 kees closed 2 years ago
1
Update lib/test_usercopy.c to catch argument side-effects

#157 kees opened 2 years ago
0
Fix privileged struct tty_operations functions to use file-opener not capable()

#156 kees opened 2 years ago
0
Provide "near overflow" API for refcount_t

#155 kees opened 2 years ago
0
Set BPF region read-only before starting verification

#154 kees opened 2 years ago
1
Remove CONFIG_HARDENED_USERCOPY_FALLBACK

#153 kees closed 2 years ago
7
Enable -Wshadow=local

#152 kees opened 2 years ago
2
Deal with object size mismatches seen with GCC 11.2 -Warray-bounds

#151 kees closed 2 years ago
4
Add __alloc_size annotations to the skb allocators

#150 kees opened 2 years ago
1
Disconnect seccomp and spectre mitigations

#149 kees closed 2 years ago
1
Explore Clang's __builtin_dynamic_object_size

#148 kees closed 6 months ago
3
Explore PAC for signing functions stored in the heap

#147 kees opened 3 years ago
1
Enable -Wstringop-overread

#146 kees closed 2 years ago
2
Deal with -Wstringop-overflow workarounds

#145 kees opened 3 years ago
0
Enable -Wstringop-truncation

#144 kees opened 3 years ago
1
Clean up all UBSAN object-size mismatches

#143 kees closed 2 years ago
1
Implement CET in kernel

#142 kees opened 3 years ago
3
Retire obsolete crypto

#141 ardbiesheuvel opened 3 years ago
0
Replace open-coded skb->data casts with a bounds checking struct-size-aware API

#140 kees opened 3 years ago
4
Refactor sysfs (really kernfs) to make "file" available for f_cred access

#139 kees opened 3 years ago
1
keep slab allocations separate from page allocator allocations

#138 kees opened 3 years ago
0
Double flex array at the end of struct

#137 GustavoARSilva closed 2 years ago
2
constant string overflows lack compile-time warning since v5.11

#136 kees closed 2 years ago
2
Can /proc/$pid/fdinfo/ leak across privilege changes

#135 kees opened 3 years ago
0
Enable -Wrestrict

#134 kees opened 3 years ago
3
Always zero stack variables

#133 kees opened 3 years ago
0
Function-granular KASLR

#132 kees opened 3 years ago
4
Prevent kprobes from “leaking” symbol addresses

#131 skitt closed 3 years ago
3
Implement "write rarely" infrastructure

#130 kees opened 3 years ago
2
Add LKDTM test for per-task stack canaries

#129 kees closed 2 years ago
1
Examine eBPF exposures under CFI

#128 kees opened 3 years ago
0
Enable -Wformat under Clang

#127 kees opened 3 years ago
1
Explore performing taint-tracking of writes to kernel addresses that came from userspace

#126 kees opened 3 years ago
0
pre-"case" switch variable declarations are not covered by -fauto-var-init

#125 kees opened 3 years ago
0
randomize vmalloc() allocations

#124 kees opened 3 years ago
0
randstruct: use cryptographic RNG

#123 kees opened 3 years ago
0
randstruct: explicitly randomize padding holes

#122 kees opened 3 years ago
0
Improve FORTIFY_SOURCE to detect intra-object overflows in string handling

#121 kees closed 3 years ago
1
Replace one-element arrays with flexible-array members in UAPI

#120 kees closed 3 years ago
2
Fix race conditions in /proc between execve() and ptrace_may_access()

#119 kees opened 3 years ago
0
Fix race conditions between mm_exit() and ptrace_may_access() (i.e. dumpability)

#118 kees opened 3 years ago
2
potential Yama bypasses via perf_event_open()

#117 kees opened 3 years ago
0
follow up on UBSAN "shift out of range" reports

#116 kees opened 3 years ago
0
Enable -Wimplicit-fallthrough for Clang

#115 GustavoARSilva closed 2 years ago
8
af_alg sockaddr array size needs fixing

#114 kees closed 3 years ago
1

Previous Next