News for hackers. Stuff that matters.

A comment on CVE-2023-2163: How we found and fixed an eBPF Linux Kernel Vulnerability. Parent comment

Re:CVE-2023-2163: How we found and fixed an eBPF Linux Kerne... by ssahoo on Thursday August 08, 2024 @10:31AM (#41191959)
Wouldn't even the classic loadable kernel mode driver be a better choice than a patch and eBpf? I know they are unsafe but people who deal with it, know the power comes with responsibility.
[ Parent | on HN ]
Re:CVE-2023-2163: How we found and fixed an eBPF Linux Kerne... by tptacek on Thursday August 08, 2024 @10:38AM (#41192023)
No? SREs roll eBPF programs on the fly just in the process of debugging problems; if you tried to do that with an LKM, you'd almost certainly blow up your system. People who write Linux kernel code routinely crash their systems in the process of development.
[ Parent | on HN ]