Detecting Kernel Memory Disclosure – Whitepaper
Summary: Project Zero's Mateusz Jurczyk published a whitepaper on detecting kernel memory disclosure, describing Bochspwn Reloaded, a dynamic binary instrumentation tool built on the Bochs IA-32 software emulator. The project found and reported over 70 previously unknown security issues in Windows and more than 10 bugs in Linux, and the paper covers the bug class's origins in the C language, detection methods, and future research.
Bottom line: More than 70 previously unknown Windows kernel issues came out of one instrumentation project, and the paper argues the leak class is rooted in C itself rather than simple coding mistakes - meaning the underlying pattern is not something a patch cycle retires.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026