Yet another memory corruption bug in the Linux kernel

Yet another memory corruption bug caught thanks to -Wflex-array-member-not-at-end! 🐛🪲🐧



The maintainer has already taken this patch, and it will soon land in mainline and a couple of stable trees. 😃🐧

Here’s a link to the slides and video from my latest presentation at Linux Plumbers Conference, where I discuss the ongoing efforts to globally enable the -Wflex-array-member-not-at-end compiler option in the upstream Linux kernel:


This work aims to eradicate these types of memory corruption vulnerabilities from the kernel once and for all. 😀🙌🏽

Kernel Self-Protection Project ⚔️🛡️🐧

Gustavo A. R. Silva
Gustavo A. R. Silva works full-time as an Upstream Linux Kernel Engineer focused on hardening and proactive security. Over the past several years, he’s been hunting down and fixing all sorts of bugs and issues in the Linux kernel, as well as implementing hardening features. Gustavo's kernel work is supported by The Linux Foundation, and he is a member of the Kernel Self-Protection Project. He is a regular speaker at Kernel Recipes and has also presented his work at conferences such as Linux Security Summit, LinuxCon, Lund LinuxCon, Linux Plumbers and Everything Open. Additionally, Gustavo has been an invited speaker at SSTIC.

Leave a Comment

Your email address will not be published. Required fields are marked *