Microsoft resumes work on Hornet security for Linux eBPF

Microsoft has returned to developing 'Hornet', a security feature for eBPF programs on Linux. The project, highlighted by Phoronix, focuses on enhancing protections for these kernel-level programs.

Microsoft engineers are once again advancing the 'Hornet' initiative, which targets security improvements for eBPF programs operating within the Linux kernel. eBPF, or extended Berkeley Packet Filter, enables efficient execution of user-defined programs in the kernel without modifying its code, and Hornet aims to bolster safeguards around this technology.

Phoronix reports that after a period of inactivity, Microsoft has picked up development efforts on Hornet. This work is part of broader contributions to Linux security, particularly for eBPF, which is widely used in networking, tracing, and security monitoring. No specific timelines or additional details on the project's progress were provided in the coverage.

The resumption of Hornet development underscores Microsoft's ongoing investment in open-source Linux technologies, despite its primary focus on Windows. eBPF has become a cornerstone of modern Linux distributions, and strengthening its security could benefit developers and system administrators relying on it for performance-critical tasks.

관련 기사

Illustration of Linux kernel 6.19 release with Tux penguin, scheduling enhancements, Microsoft C extensions, and collaborating tech giants for a news article.
AI에 의해 생성된 이미지

Linux kernel 6.19 adds scheduling enhancements and Microsoft C extensions

AI에 의해 보고됨 AI에 의해 생성된 이미지

The upcoming Linux kernel 6.19 introduces key improvements to the sched_ext framework for better eBPF scheduler recovery and integrates Microsoft C extensions for cleaner code compilation. These updates aim to enhance stability, performance, and developer efficiency in various computing environments. Contributions from companies like Google, Meta, and Microsoft highlight growing collaboration in open-source development.

Elastic Security Labs has detailed the evolution of Linux rootkits in a two-part research series published on March 5, 2026. These modern threats exploit kernel features like eBPF and io_uring to remain hidden in cloud, IoT, and server environments. The research highlights how such rootkits evade traditional detection methods.

AI에 의해 보고됨

Phoronix has reported on updated Linux patches aimed at managing out-of-memory behavior through BPF technology. These developments focus on improving how the Linux kernel handles memory shortages. The updates are part of ongoing efforts in open-source Linux advancements.

Gentoo Linux has started migrating its repositories away from GitHub toward Codeberg, allowing contributors to submit pull requests via the new platform. This move follows plans outlined in the project's 2025 end-of-year review and addresses concerns over Microsoft's ownership of GitHub. The initial repository mirror for ebuilds is now live, with more infrastructure to follow.

AI에 의해 보고됨

Microsoft is broadening its bug bounty programs to include incentives even for those without official payouts. The company has introduced a new 'In Scope by Default' approach to encourage security research.

Electronic Arts is seeking a Senior Anti-Cheat Engineer to develop a native ARM64 driver for its kernel-level Javelin anti-cheat, primarily for Windows on ARM devices, while planning future support for Linux and Proton. This could expand multiplayer access for ARM laptops like those with Snapdragon X Elite and Linux handhelds such as the Steam Deck.

AI에 의해 보고됨

At the NDSS 2025 conference, Hengkai Ye and Hong Hu from The Pennsylvania State University presented a paper on subtle vulnerabilities in Linux systems that reintroduce executable stacks. Their work highlights how developers, including security experts, accidentally disable protections against code injection attacks. The study examines tools and system components to reveal gaps in enforcing write-xor-execute policies.

 

 

 

이 웹사이트는 쿠키를 사용합니다

사이트를 개선하기 위해 분석을 위한 쿠키를 사용합니다. 자세한 내용은 개인정보 보호 정책을 읽으세요.
거부