- Tweets 129
- Following 98
- Followers 331
- Likes 29,986
Linux 7.0 still does not support Intel CET indirect branch tracking (IBT) in usermode.
Intel CPUs supporting IBT first appeared in 2021.
Here's my patch series: lore.kernel.org/lkml/2026051…
2
12
65
21,918
IBT enforces that indirect calls and jumps can't land on any arbitrary instruction, but one of these:
[f3 0f 1e fa] endbr64
"jmp rax" to elsewhere causes a segfault SEGV_CPERR, defending against control flow hijacking (e.g. corrupt function pointer).
1
1
11
2,641
This came up while adding control flow integrity to Firedancer's sandbox.
One of the best Linux x86 jails out there, enforcing process isolation, namespaces, strict seccomp, landlock, MPK (user protection keys), CFI, and soon more.
github.com/firedancer-io/fir…
2
12
897
ripatel retweeted
Today we revived Richie's old blog, bpf.wtf. We'll be pushing a few PRs to add the new syscalls and keep it up to date. To this day, it's still one of the best resources for learning sBPF Assembly. No more Wayback Machine! Compiler disrespecters rejoice!
7
15
125
10,874
ripatel retweeted
In the last 24 hours @triton_one has served nearly 24 PETABYTES of Solana history via Old Faithful.
31
24
178
58,213