INTEL_REPORT
LWN.net (kernel & development security) · published 5/14/2026, 1:14:30 PM · TLP amber
Summary
Ingested excerpt (first ~500 chars of normalized text).
[$] Keeping COWs in context (a.k.a. anonymous reverse mapping) The kernel's reverse-mapping machinery is charged with locating the page-table entries that refer to a given page in memory. The reverse mapping of anonymous pages is handled differently than for file-backed pages. The kernel's implementation of reverse mapping for anonymous pages is, according to Lorenzo Stoakes in his proposal for a memory-management-track session at the 2026 Linux Storage, Filesystem, Memory M…
https://lwn.net/Articles/1072378
sha256:c7e3bdbf012a2efaba61bd2a7e932bfd82b99c8cd23cd63637a9b2fb9fe973c5
What we pulled out
Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).
Indicators
Linked with report → mentions → indicator. Values open the indicator workspace.
No indicators linked for this report.
Malware families
Allowlist token matches only.
Threat actors mentioned
Allowlist mentions — not a formal attribution verdict.
ATT&CK techniques
MITRE IDs referenced in text and present in local technique table.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Browse the report corpus.