Backdoor in wait4(): Linux kernel vulnerability https://sudonull.com/backdoor-in-wait4-linux-kernel-vulnerability
Analysis of a real backdoor in the Linux kernel from 2003: how an assignment error in wait4() opened root access. Lessons for developers: code review, Git, fuzzing. Study the details of the attack.
ICMP tunnel in the Linux kernel: TCP/UDP encapsulation https://sudonull.com/icmp-tunnel-in-the-linux-kernel-tcp-udp-encapsulation
How to implement an ICMP tunnel in the Linux kernel for TCP/UDP traffic encapsulation. Code analysis, Netfilter hooks and working with sk_buff. Useful for middle/senior developers.
ELKS 0.9 for 8086: Linux kernel on 16-bit https://sudonull.com/elks-0-9-for-8086-linux-kernel-on-16-bit
ELKS 0.9 released for Intel 8086/80286: Nano-X, NXDSKTOP, C86 toolchain, Doom. Test in QEMU or Bochs. Update details for developers.
sched_ext: BPF Schedulers in Linux 6.12 https://sudonull.com/sched-ext-bpf-schedulers-in-linux-6-12
Explore sched_ext — a new class of schedulers in the Linux 6.12 kernel. Dynamic policy replacement via BPF for optimization under workloads. Benchmarks, examples, scenarios.
Removing i486 from Linux: Molnar's patch https://sudonull.com/removing-i486-from-linux-molnar-s-patch
Ingo Molnar proposes to remove i486 support from the Linux kernel, cutting the code by 14 thousand lines. CX8 and TSC emulation will go away. Details for x86 developers.