io_uring: So Fast. It's Scary.
Details io_uring: So Fast. Its Scary and evaluates key implications for security practitioners.
Summary
Overview: A presenter at Linux Security Summit Europe delivers a deep dive on io_uring, Linux's high-performance asynchronous I/O interface, examining its security implications.
Key Topics: io_uring as asynchronous I/O replacing synchronous syscall overhead; submission and completion queues; shared memory rings between kernel and userspace; and security considerations for the attack surface.
Technical Details: The talk explains io_uring's architecture where applications submit multiple I/O requests without waiting, using shared ring buffers for kernel-userspace communication. The speaker notes this replaces traditional open/read/write syscall paths.
Takeaways: io_uring's performance benefits come with a new attack surface via shared kernel-userspace memory. Security researchers and defenders should audit io_uring usage in privileged applications.
Related talks
Black Hat·10 min
Falcon Complete
Engineers explore architecture and security mechanisms for Fast Chat with Austin Murphy, CrowdStrike’s VP & GM, Falcon Complete.
The Linux Foundation·32 min
Date (Yu-Chiang) Huang
Demonstrates EZIO: Predictable, Fast, Scalable BitTorrent-Based Bare Metal… and evaluates key implications for security practitioners.
The Linux Foundation·45 min
Jim Huang
Presents construct a Lean and Fast RISC-V System Emulator Capable of Running Linux and evaluates key implications for security practitioners.


