Exploring Function-Level Code Metrics and Developer Attributes for Linux Kernel Vulnerabi... Yan Sun
Join us at the premier vendor-neutral open source conference, where developers and technologists come together to collaborate, share knowledge, and explore the latest innovations and advancements in open source technology. Learn more at https://events.linuxfoundation.org/
Exploring Function-Level Code Metrics and Developer Attributes for Linux Kernel Vulnerabilities - Yan Sun, University of Minnesota
In recent years, the number of documented Linux kernel CVEs has increased substantially, following the kernel’s designation as an official CVE Numbering Authority in 2024. This transition improves access to ground-truth kernel CVEs and their corresponding patches, creating new opportunities for empirical studies of kernel vulnerabilities at scale.
To better understand the characteristics of kernel vulnerabilities, we collect vulnerability-fixing commits (VFCs) and vulnerability-inducing commits (VICs) associated with kernel CVEs over the past 10 years. We then perform a metrics-based analysis that examines function-level code metrics and developer attributes between VFCs and VICs.
This session presents features associated with VICs. In particular, we find that authors of VICs are generally less active and have lower code familiarity at the file, subdirectory, and kernel levels. In addition, we observe a higher representation of maintainers among VICs. The session also discusses vulnerability distributions across our CVE dataset. Finally, we outline how our research can inform bug discovery practices and support the development of vulnerability detection tools in the kernel.
On this page of the site you can watch the video online Exploring Function-Level Code Metrics and Developer Attributes for Linux Kernel Vulnerabi... Yan Sun with a duration of hours minute second in good quality, which was uploaded by the user The Linux Foundation 03 June 2026, share the link with friends and acquaintances, this video has already been watched 52 times on youtube and it was liked by 1 viewers. Enjoy your viewing!
