Microsoft FORGE Lab: analysis of Linux kernel vulnerabilities

Microsoft FORGE Lab researchers conducted an in-depth investigation into vulnerabilities present in the Linux kernel, using a project with the code name MDASH. The work carried out by the team led to the reporting of 59 bugs upstream, allowing the assignment of 33 CVEs and the integration of 38 total fixes into the code.

During this research activity, the experts demonstrated eight local root privilege escalation exploits. Furthermore, the study examines the various challenges related to converting AI-generated results into actually validated vulnerabilities and definitive upstream fixes.