Impact of Platform Firmware on Linux Kernel
summary
Examines real-world bugs in UEFI platform firmware and the Linux kernel's EFI subsystem that caused system crashes or illegal firmware access to OS memory, and outlines possible fixes. Describes LUV (Linux UEFI Validation), a unified framework that packages multiple open-source test suites to help firmware developers validate UEFI implementations against Linux interoperability issues.
AI-written summary · about
chapters (22)
- 0:00Intro
- 0:59AGENDA
- 1:33Introduction to UEFI
- 5:00UEFI Services
- 7:56Boot Process - Before ExitBootServices
- 8:55Boot Process - After ExitBootServices
- 11:01Boot Process - Virtual Address space
- 12:58Illegal accesses by firmware
- 16:00Illegal access by EFI Runtime Service
- 17:58Samsung laptops bricked by UEFI
- 21:41Kernel bugs causing panic
- 24:07Buggy firmware causes issues
- 26:14UEFI implementation is critical
- 27:48Current Validation Strategy
- 29:16Why LUV?
- 30:55LUV: A unified framework
- 33:21LUV: Covering the entire spectrum
- 34:48LUV: Detect bugs early
- 35:53LUV: Easy to use
- 36:43LUV: Easy to contribute
- 37:20LUV: Available features
- 39:55LUV: Path to better firmware
related talks
01h 04mAnalyzing UEFI BIOSes from Attacker & Defender Viewpoints
25mThe Future of Platform Security Measurement in Linux
40mHardware Security Is Hard: How Hardware Boundaries Define Platform Security
38mReplace Your Exploit-Ridden Firmware with Linux
30mWhy Open Source Firmware is Important
57mExtreme Privilege Escalation on Windows 8/UEFI Systems
32mWhy Open Source Firmware is Important
06mQ&A