MTE As Implemented, Part 2: Mitigation Case Studies

Notes on the first handset shipping with Arm Memory Tagging Extension (MTE) support, what the hardware mitigation means for memory-safety exploits, and early observations.

Part 1 of the MTE As Implemented series, testing real-world implementations of Arm Memory Tagging Extension to establish a correctness baseline for later mitigation analysis.

Part 3 of the MTE As Implemented series, examining kernel-side support for Arm Memory Tagging Extension, its performance costs, and gaps observed in real implementations.

The closing summary of the MTE As Implemented series, assessing how Arm Memory Tagging Extension behaves in real deployments and its practical effect on memory corruption exploitation.

A case study on effective fuzzing of dav1d, the open-source AV1 decoder, covering harnessing decisions, coverage strategy, and lessons for hunting codec vulnerabilities.

An examination of how null pointer dereferences in the Linux kernel can be turned into exploitable primitives under modern configurations, with examples and mitigations.