3 ms·

> Current io_uring is not particularly prone to vulnerabilities The tech industry: launch early! Develop in public! Many eyes make all bugs shallow! Also the

> Current io_uring is not particularly prone to vulnerabilities The tech industry: launch early! Develop in public! Many eyes make all bugs shallow! Also the tech industry: we will never forgive you for that one segfault you had ten years ago.

dietr1ch 2y ago
Remember that 10yo crash? Well, I'm going to use a 12yo kernel and complain about it.
- deleted 2y ago
  [deleted]
poincaredisk 2y ago
Excuse me? Io_uring is by far the most often exploited syscall on modern day Linux. Most often exploited subsystem even. https://www.phoronix.com/news/Google-Restricting-IO_uring https://www.phoronix.com/news/Google-Restricting-IO_uring
- JoshTriplett 2y ago
  That's a lot like saying "the syscall interface is the most exploited interface to the kernel". io_uring is an entire syscall interface itself; the right point of comparison would be "every other syscall". How do the exploits for io_uring compare to the exploits for the rest of the kernel? https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=%22linux%20kernel%22 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=%22linux%20...