
Kill Switch for Linux: Quick Patch or New Attack Surface?
The Linux kernel has faced severe CVEs (Copy Fail and Dirty Frag) that enable privilege escalation. NVIDIA engineer Sasha Levin proposed an in-kernel “kill switch” that would intercept calls to affected functions and return a safe value, allowing systems to keep running until patches arrive. Proponents say this could buy time without rebooting; critics warn it would patch the kernel in memory, may require reboots to clear, could create new attack surfaces, and raises concerns about AI-generated patches and how it compares to existing livepatch approaches.







