Re: [kernel-hardening] 2015 kernel CVEs

[Kees Cook]

On Tue, Jan 19, 2016 at 3:28 AM, Dan Carpenter <dan.carpenter@xxxxxxxxxx> wrote:
> Many of the use-after-free and uninitialized data bugs would be less
> harmful if we had some kernel hardening patches.

I think this nicely underscores the importance of all the hardening
efforts, especially Laura's PAX_MEMORY_SANITIZE port. And with the
recent keyring issue, having David's PAX_REFCOUNT port too. It's all
coming along (slowly). :)

-Kees

-- 
Kees Cook
Chrome OS & Brillo Security