kernel-security-skill

What problem does it solve?

This Skill systematically analyzes kernel security at the hardware/software interface, identifying vulnerabilities in memory management, process isolation, privilege escalation, and hardware configuration.

Core Features & Use Cases

• Kernel Configuration Analysis: Assesses security-relevant kernel options against benchmarks.
• Isolation Boundary Mapping: Identifies privilege levels and transition points, evaluating namespace and cgroup isolation.
• Attack Surface Enumeration: Details syscalls, modules, and debug interfaces.
• Privilege Escalation Path Analysis: Documents concrete paths for user-to-kernel, container escape, and IOMMU/SMMU bypasses.
• Use Case: A security engineer needs to audit a new Linux kernel deployment for potential privilege escalation vectors and isolation weaknesses before it goes into production.

Quick Start

Analyze the kernel configuration and isolation mechanisms for the provided kernel version and deployment context.