SymBisect: Accurate Bisection for Fuzzer-Exposed Linux Vulnerabilities
Talkat Linux Security Summit North America 2025 · on Friday, 2025-06-27· at 13:40· Bluebird Ballroom (BBB) 3GH·
summary
Describes SymBisect, a tool that performs commit bisection for Linux kernel vulnerabilities discovered by fuzzers by searching for the underlying bug logic rather than merely replaying proofs-of-concept. Targets limitations of existing approaches that break on changing environments or require available patches, and uses semantic/logic-based analysis to more precisely identify the introducing commit and affected versions.
AI-written summary · about
related talks
52mStructure aware fuzzing
27mBinSim: Trace-based Semantic Binary Diffing...
24mSymbiotic: finding bugs in C programs
53mThree Colours of Fuzzing: Reflections and Open Challenges
23mPrecise and Accurate Patch Presence Test for Binaries
21msyzbot ci: continuous patch series fuzzing
27mPeriScope: An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary
18mOptimizing Input Minimization in Kernel Fuzzing