Technology Nvidia Engineer Proposes Linux Kernel Killswitch to Disable Vulnerable Functions Before Patches Land

lokamoka820

Level 45
Thread author
Verified
Top Poster
Well-known
Mar 1, 2024
3,423
3
11,499
4,369
Banana Republic
Nvidia engineer Sasha Levin has introduced a new mechanism for the Linux kernel that allows privileged operators to temporarily disable specific kernel functions. This can be done by returning a fixed value instead of executing the function, serving as a stopgap security measure while official patches are being developed.

Levin explained that this "killswitch" enables a privileged operator to make a chosen kernel function return a predetermined value without running its code. The purpose is to provide a temporary mitigation for security vulnerabilities during the period between disclosure and the release of a proper fix.

When a security issue becomes public, Linux systems are often more vulnerable until a fix is released. The killswitch would allow administrators to disable a specific vulnerable function in the kernel rather than running a system with a known flaw or rolling back to an older kernel version.
 
@lokamoka20,

When I was running Windows10 and Linux Mint on my desktop I hardly heard from Linux kernel exploits. Now I am on MT and using Linux only on my laptiop, it looks that it is occurring more often (probably due to AI or because I joined MT), so it looks lie a good idea. Problem with adding an option to witch off kernels functions it opens also a door to be misused.
 
  • Hundred Points
Reactions: lokamoka820
Indeed, Linux has some new exploits. Perhaps attackers are becoming more interested in Linux now that some governments are planning to switch from Windows to Linux, and the AI revolution benefits both attackers and maintainers.