Skip to content

Can we mitigate eBPF Verifier bugs using Safe Rust or PREVAIL?

License

Notifications You must be signed in to change notification settings

luisgerhorst/sust

Repository files navigation

susT

Quick Start

# Run the exploit compiled from safe Rust in a VM with the vulnerable kernel:
./test-rustc.sh

# Test that PREVAIL is not vulnerable to CVE-2017-16995:
./test-prevail.sh

See vbpf/ebpf-verifier#824 on why a PREVAIL-based layered verification design can still be exploited.

About

Can we mitigate eBPF Verifier bugs using Safe Rust or PREVAIL?

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published