Thread

Several vulnerabilities have been discovered in the Linux kernel

576 points · 408 comments · luispa

snvzz · 1790914855 · focus · HN ↗
As a reminder: Millions of LoCs that run in supervisor mode. This is what Linux is.
It is not possible to fix all the bugs. This is simply not doable.
The solution has to be fundamental.
The microkernel multiserver system architecture, with a formally verified microkernel. Nothing else can guarantee enforcement of anything.
In practice, this is the same as saying seL4[0], because there are no alternatives.
Related: The seL4 summit 2026 vids are finally up[1].
0. <a href="https://sel4.systems/" rel="nofollow">https://sel4.systems/
1. <a href="https://www.youtube.com/playlist?list=PLd7rrADYxxQQ" rel="nofollow">https://www.youtube.com/playlist?list=PLd7rrADYxxQQ
1. trollbridge · 1790915048 · focus · HN ↗
  History has proven that the microkernels are not necessarily more secure and have their own unique set of problems (see: macOS).
  1. hn_submit · 1790918356 · focus · HN ↗
    MacOS is not a microkernel, but a hybrid. It's therefore neither secure nor fast.
    trollbridge · 1790962244 · focus · HN ↗
    This is how microkernels generally go: a No True Scotsman once I try to find any real world microkernels you can actually run things on.

Unofficial Hacker News client; not affiliated with Y Combinator.