MTE As Implemented, Part 1: Implementation Testing

The closing summary of the MTE As Implemented series, assessing how Arm Memory Tagging Extension behaves in real deployments and its practical effect on memory corruption exploitation.

Notes on the first handset shipping with Arm Memory Tagging Extension (MTE) support, what the hardware mitigation means for memory-safety exploits, and early observations.

Part 2 of the MTE As Implemented series, presenting case studies of how Memory Tagging Extension mitigates real memory corruption exploits and where attackers might adapt.

Part 3 of the MTE As Implemented series, examining kernel-side support for Arm Memory Tagging Extension, its performance costs, and gaps observed in real implementations.

A case study on effective fuzzing of dav1d, the open-source AV1 decoder, covering harnessing decisions, coverage strategy, and lessons for hunting codec vulnerabilities.

An examination of how null pointer dereferences in the Linux kernel can be turned into exploitable primitives under modern configurations, with examples and mitigations.