Crashing Through Defenses: Exploiting Segfaults and Chaining around Intel CET
How researchers at CISPA and IIT Kanpur uncovered twelve novel implementation weaknesses in Linux signal handling—introducing Segmentation Fault-Oriented Programming (SFOP) to bypass hardware Shadow Stacks and Indirect Branch Tracking (IBT).