https://giovanninicosia.dev/tags/security/ Recent content in Security on Giovanni Nicosia Hugo en Thu, 25 Sep 2025 00:00:00 +0200 https://giovanninicosia.dev/projects/ebpf-vulns/ Thu, 25 Sep 2025 00:00:00 +0200 https://giovanninicosia.dev/projects/ebpf-vulns/ <p>This project is a structured testing suite that demonstrates real-world security vulnerabilities in <strong>eBPF and XDP</strong> kernel programs, mapping each finding to coding rules defined in <strong>ISO/IEC TS 17961</strong> (C Secure Coding Rules). The suite covers issues such as out-of-bounds memory access, uninitialized map values, integer overflows in packet offset calculations, and verifier bypass patterns.</p> <p>Each test case ships as a pair of intentionally vulnerable and patched C programs, loadable into the kernel via <code>bpftool</code>. The test environment is isolated inside a <strong>KVM/QEMU</strong> virtual machine to prevent any risk of destabilising the host kernel during verifier stress tests and deliberately crashing probes.</p>