Google wants to make Linux kernel flaws harder to exploit

guest · Aug 11, 2022

'Experimental mitigations' in a custom kernel could make life harder for hackers.
August 11, 2022

Google says it uses Linux in "almost everything" from Chromebooks to the cloud. Now it is increasing its rewards for security researchers who can spot flaws in the open source operating system.

Since 2020, Google has run an open-source Kubernetes-based Capture-the-Flag (CTF) project called kCTF which allows researchers connect to its Google Kubernetes Engine (GKE) instances, and try to hack them to capture a flag. Every 'flag' caught so far has been a container breakout through a Linux kernel vulnerability.
Click to expand...

Now Google has built a set of mitigations it believes will make most of the vulnerabilities and exploits it has received this past year more difficult to exploit.
Google said it is offering up to $133,337 to hackers who can beat these mitigations.

Now it's offering an extra $21,000 for new exploits that compromise the latest Linux kernel and another $21,000 for hackers who can "clearly" bypass its experimental exploit mitigations in its custom instance. This brings total rewards up to a maximum of $133,337.
Click to expand...

The kCTF program emphasizes finding new exploits against the kernel rather than new vulnerabilities. Google is keen to develop protections for the Linux kernel, which is used in Android, Chromebook and in Google Cloud workloads.
Click to expand...

Log in or Sign up

Google wants to make Linux kernel flaws harder to exploit

guest Guest

Log in or Sign up

Google wants to make Linux kernel flaws harder to exploit

guest Guest

Useful Searches