查看文章

Intel Memory Protection Keys (MPK) is a new hardware primitive to support thread-local permission control on groups of pages without requiring modification of page tables. Unfortunately, its current hardware implementation and software support suffer from security, scalability, and semantic problems:(1) vulnerable to protection-key-use-after-free;(2) providing the limited number of protection keys; and (3) incompatible with mprotect ()’s process-based permission model.