Cyber ·
Patches propose protecting Linux kernel hibernation against tampering and downgrade attacks
A series of patches seeks to allow hibernation alongside the kernel lockdown feature, protecting saved data against tampering and downgrade attacks. Account machine-translated from the LWN feed.
When hibernating, the Linux kernel writes memory contents to disk and then shuts the system down. On resume, that data is read back and execution continues where it stopped. The issue raised is that the kernel cannot tell whether the data read back has been tampered with, so lockdown, an optional kernel feature that tries to prevent modifications to the running kernel, disables hibernation.
A patch series from a developer who has long worked on lockdown aims to fix this limitation. According to the report, the solution must also resist downgrade attacks, in which an attacker reboots the machine into an older kernel version to bypass newer protections, which makes the implementation more complex.
Relevance to Rota Nacional: this is operating system security and does not involve the platform's API, dashboard or data processing. Rota Nacional does not solve or change this mechanism. To check the original, consult the LWN feed cited in the report and verify the current state of the patch series before trusting any version.
Original source: Reforço das proteções contra hibernação no kernel Linux