INTEL_REPORT
arXiv — Cryptography & Security (cs.CR) · published 5/14/2026, 4:00:00 AM · TLP amber
Summary
Ingested excerpt (first ~500 chars of normalized text).
Automatic Detection of Reference Counting Bugs in Linux Kernel Drivers arXiv:2605.13246v1 Announce Type: new Abstract: Reference counting bugs in Linux kernel drivers can lead to severe resource mismanagement and security vulnerabilities. We introduce DrvHorn, a novel automated tool to detect these bugs by reducing reference counting verification to an assertion checking problem leveraging the Linux driver interface. Through efficient modeling of the Linux kernel and aggress…
https://arxiv.org/abs/2605.13246
sha256:4d2d2ec5bb5e6e45c9deed93e9af921537ee8b0d45797e68287c4fe0e24bc643
What we pulled out
Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).
Indicators
Linked with report → mentions → indicator. Values open the indicator workspace.
No indicators linked for this report.
Malware families
Allowlist token matches only.
Threat actors mentioned
Allowlist mentions — not a formal attribution verdict.
ATT&CK techniques
MITRE IDs referenced in text and present in local technique table.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Browse the report corpus.