3 ms·
My understanding is that Linux is just as vulnerable to this issue as Windows but isn't used as often for desktop software. In fact there two security incidents
by Maxatar 2y ago
My understanding is that Linux is just as vulnerable to this issue as Windows but isn't used as often for desktop software. In fact there two security incidents just this year involving Crowdstrike on Debian and Rocky Linux.
- thuridas 2y agoWhat I understood is that in Linux you could program this kind of security tools in use space by having a somehow estable binary API. Sure, if you access the kernel you can break it. So we should make easier to do the right thing. EU complained that Microsoft was the only one that could access the kernel because a lot of Microsoft applications needed kernel access.
- Maxatar 2y agoI see, reading about this issue it looks like eBPF can be used in Linux to sandbox kernel applications, preventing such applications from crashing the kernel as a whole.