Kernel Self Protection Project/Work

Work Areas

The Kernel Self Protection Project has a lot of work to do! While there are already a number of upstream kernel security features, we are still missing many.

For the list of specific items and desired features, see the KSPP Issue Tracker.

General concepts and concerns are here:

Bug Classes

• Stack overflow
• Integer overflow
• Heap overflow
• Format string injection
• Kernel pointer leak
• Uninitialized variables
• Use-after-free

Exploitation Methods

• Kernel location
• Text overwrite
• Function pointer overwrite
• Userspace execution
• Userspace data usage
• Reused code chunks