EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 9·5 min read
Crashing Through Defenses: Exploiting Segfaults and Chaining around Intel CET
TL;DR
Research reveals methods to exploit segmentation faults (segfaults) and bypass Intel's Control-flow Enforcement Technology (CET), enhancing security vulnerabilities. The findings highlight critical weaknesses in current defense mechanisms against such attacks.
✦ Why It Matters
Review your software's defenses against segfaults and consider implementing additional security measures beyond Intel CET.
Key Takeaways
- Investigate potential segfault vulnerabilities in your applications.
- Evaluate the effectiveness of Intel CET in your security architecture.
- Implement additional layers of security beyond CET.
- Stay updated on emerging attack techniques and defenses.
Full Summary
Segmentation faults (segfaults) occur when a program attempts to access an invalid memory location, often leading to crashes. This research explores how attackers can exploit segfaults to bypass Intel's Control-flow Enforcement Technology (CET), which is designed to prevent certain types of exploits.
By chaining together various techniques, the study demonstrates that even with CET in place, vulnerabilities can still be exploited effectively. The methodology involved testing different attack vectors and analyzing their success rates against CET protections.
Results indicate that a significant percentage of attacks can still succeed, raising concerns about the robustness of current security measures. These findings suggest that software engineers need to rethink their approach to security, especially in systems utilizing CET.