Gadi Evron
When there isn’t yet a patch, like w/ a named Linux vuln, eBPF as a “patching” strategy is what these two very experienced teams out there are doing right now. Check out what Cloudflare and Datadog did. Cloudflare: https://blog.cloudflare.com/copy-fail-linux-vulnerability-mitigation/ Datadog: https://docs.datadoghq.com/security/default_rules/def-000-yc7/