Dirty Frag: Why Hardware Isolation Matters (opens in new tab)

A new kernel zero-day gives unprivileged users deterministic root on most Linux distributions since 2017. We tested it against our microVM isolation boundary. Here's what happened.