Am I glitching or I see 3 similar replies ðŸ«
It’s not about assuming hardware is 100% flawless, I'm saying it’s about shrinking the attack surface( referencing the blogs )
the linux kernel has millions of lines of code with new LPE CVEs dropping constantly due to AI, like for f sake every other month.
a minimal KVM hypervisor interface is orders of magnitude smaller.
hypervisors can still be patched via host software/microcode updates. Breaching KVM is so difficult Google literally runs a $250k CTF bounty for hypervisor escapes because finding those bugs is drastically harder than finding a Linux kernel LPE.
Also, I don't think comparing a complex bit-flip attack like rowhammer to a kernel exploit is right.
No boundary is unhackable,I know that, but raising the bar significantly is the entire point.
Hope this helps, other than this, the blogs I referenced explain it more clearly.
