{"id":1235464,"date":"2025-02-27T10:44:23","date_gmt":"2025-02-27T15:44:23","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1235464"},"modified":"2025-02-27T10:44:23","modified_gmt":"2025-02-27T15:44:23","slug":"a-hole-in-fineibt-protection","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1235464","title":{"rendered":"[$] A hole in FineIBT protection"},"content":{"rendered":"<div>Intel&#8217;s <a href=\"https:\/\/en.wikipedia.org\/wiki\/Indirect_branch_tracking\">indirect<br \/>\nbranch tracking (IBT)<\/a> is a hardware-implemented control-flow-integrity<br \/>\nmechanism that makes it harder for an attacker to gain control of the<br \/>\nsystem by way of a corrupted indirect branch.  FineIBT is a software<br \/>\nextension to IBT that is meant to improve its protection.  Recently,<br \/>\nthough, Jennifer Miller <a href=\"https:\/\/lwn.net\/ml\/all\/Z60NwR4w\/28Z7XUa@ubun\">reported<\/a> a novel way to bypass<br \/>\nFineIBT by taking advantage of how the kernel&#8217;s system-call entry point is<br \/>\nconstructed.  In response, Peter Zijlstra is working on <a href=\"https:\/\/lwn.net\/ml\/all\/20250224123703.843199044@infradead.org\">some FineIBT<\/a><br \/>\nenhancements to close that hole and make IBT more secure in general.<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Intel&#8217;s indirect branch tracking (IBT) is a hardware-implemented control-flow-integrity mechanism that makes it harder for an attacker to gain control of the system by way of a corrupted indirect branch. FineIBT is a software extension to IBT that is meant &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1235464\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[72,116,110],"tags":[],"class_list":["post-1235464","post","type-post","status-publish","format-standard","hentry","category-linux","category-lwn-net","category-unfiltered-rss"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1235464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1235464"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1235464\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1235464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1235464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1235464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}