Conferences/Kernel Self-Protection Project/Linux Kernel Bugs/Linux Kernel Hardening/Presentations

Yet another memory corruption bug in the Linux kernel

Posted on by Gustavo A. R. Silva / 0 Comment

Yet another memory corruption bug caught thanks to -Wflex-array-member-not-at-end! 🐛🪲🐧



The maintainer has already taken this patch, and it will soon land in mainline and a couple of stable trees. 😃🐧

Here’s a link to the slides and video from my latest presentation at Linux Plumbers Conference, where I discuss the ongoing efforts to globally enable the -Wflex-array-member-not-at-end compiler option in the upstream Linux kernel:


This work aims to eradicate these types of memory corruption vulnerabilities from the kernel once and for all. 😀🙌🏽

Kernel Self-Protection Project ⚔️🛡️🐧

Gustavo A. R. Silva
Gustavo A. R. Silva works full-time as an Upstream Linux Kernel Engineer focused on hardening and proactive security. He has spent the past several years fixing all sorts of bugs and hardening the Linux kernel. His work is supported by The Linux Foundation and Alpha-Omega. He’s a member of the Kernel Self-Protection Project and a regular speaker at Kernel Recipes. He has also presented at Linux Security Summit, LinuxCon, Lund LinuxCon, Linux Plumbers, Everything Open, and SSTIC as an invited speaker.

Leave a Comment

Your email address will not be published. Required fields are marked *