SOSS Community Day Japan 2024

This session will delve into the practical experience of discovering and reporting Linux kernel vulnerabilities using the powerful kernel fuzzer, e.g. syzkaller. We will walk through the step-by-step process of conducting fuzzing tests, identifying potential vulnerabilities, and ultimately submitting them to the Linux kernel Security community. Beyond the technical aspects of vulnerability discovery, we'll also discuss the broader implications of this work on the open source ecosystem. By sharing insights into the benefits of using kernel fuzzers, we aim to encourage more developers to contribute to the security of Linux and other open source projects. Topics will include: Introduction to syzkaller and Real-world case studies: Practical examples of vulnerabilities discovered using syzkaller The vulnerability reporting process: practices for submitting vulnerabilities to the Linux kernel Security community with PoC