linux-kernel-defence-map.svg

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
 "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
<!-- Generated by graphviz version 2.44.0 (0)
 -->
<!-- Pages: 1 -->
<svg width="1745pt" height="6228pt"
 viewBox="0.00 0.00 1745.20 6228.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 6224)">
<polygon fill="white" stroke="transparent" points="-4,4 -4,-6224 1741.2,-6224 1741.2,4 -4,4"/>
<text text-anchor="middle" x="868.6" y="-6192" font-family="monospace" font-size="30.00">Linux Kernel Defence Map</text>
<g id="clust1" class="cluster">
<title>cluster_legend</title>
<polygon fill="none" stroke="black" points="8,-8 8,-222 1729.2,-222 1729.2,-8 8,-8"/>
<text text-anchor="middle" x="868.6" y="-198" font-family="monospace" font-size="25.00">Legend:</text>
</g>
<g id="clust23" class="cluster">
<title>cluster_hang</title>
</g>
<g id="clust3" class="cluster">
<title>cluster_cwe514_mitigations</title>
<polygon fill="none" stroke="black" points="540.21,-2223 540.21,-2351 838.38,-2351 838.38,-2223 540.21,-2223"/>
</g>
<g id="clust4" class="cluster">
<title>cluster_pti</title>
<polygon fill="none" stroke="black" points="475.86,-2367 475.86,-2495 902.73,-2495 902.73,-2367 475.86,-2367"/>
</g>
<g id="clust5" class="cluster">
<title>cluster_smap_pan_uderef</title>
<polygon fill="none" stroke="black" points="604.55,-2588 604.55,-2716 774.04,-2716 774.04,-2588 604.55,-2588"/>
</g>
<g id="clust6" class="cluster">
<title>cluster_ro</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="551.46,-5406 551.46,-5544 827.13,-5544 827.13,-5406 551.46,-5406"/>
</g>
<g id="clust7" class="cluster">
<title>cluster_v1_mitigations</title>
<polygon fill="none" stroke="black" points="487.11,-2074 487.11,-2212 891.48,-2212 891.48,-2074 487.11,-2074"/>
</g>
<g id="clust8" class="cluster">
<title>cluster_v2_mitigations</title>
<polygon fill="none" stroke="black" points="492.31,-1877 492.31,-2015 886.28,-2015 886.28,-1877 492.31,-1877"/>
</g>
<g id="clust9" class="cluster">
<title>cluster_ssb_mitigations</title>
<polygon fill="none" stroke="black" points="476.06,-1719 476.06,-1857 902.53,-1857 902.53,-1719 476.06,-1719"/>
</g>
<g id="clust10" class="cluster">
<title>cluster_layout_randomization</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="530.01,-5552 530.01,-5862 848.58,-5862 848.58,-5552 530.01,-5552"/>
<text text-anchor="middle" x="689.3" y="-5843.6" font-family="monospace" font-size="18.00">Layout Randomization</text>
</g>
<g id="clust11" class="cluster">
<title>cluster_info_exposure_mitigations</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="551.46,-4686 551.46,-4968 827.13,-4968 827.13,-4686 551.46,-4686"/>
</g>
<g id="clust12" class="cluster">
<title>cluster_freelist_hardening</title>
</g>
<g id="clust13" class="cluster">
<title>cluster_stack_init</title>
<polygon fill="none" stroke="black" points="540.41,-4540 540.41,-4678 838.18,-4678 838.18,-4540 540.41,-4540"/>
</g>
<g id="clust14" class="cluster">
<title>cluster_heap_erasing</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="540.41,-4359 540.41,-4497 838.18,-4497 838.18,-4359 540.41,-4359"/>
</g>
<g id="clust15" class="cluster">
<title>cluster_oob_detection</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="578.1,-4035 578.1,-4173 800.49,-4173 800.49,-4035 578.1,-4035"/>
</g>
<g id="clust18" class="cluster">
<title>cluster_oob</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="995.37,-4097 995.37,-4327 1412.37,-4327 1412.37,-4097 995.37,-4097"/>
</g>
<g id="clust19" class="cluster">
<title>cluster_userspace_access</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="1022.37,-2495 1022.37,-2653 1385.37,-2653 1385.37,-2495 1022.37,-2495"/>
</g>
<g id="clust20" class="cluster">
<title>cluster_control_flow_hijack</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="1017.37,-2661 1017.37,-3163 1391.37,-3163 1391.37,-2661 1017.37,-2661"/>
<text text-anchor="middle" x="1204.37" y="-3144.6" font-family="monospace" font-size="18.00"> &#160;Control Flow Hijack Techniques &#160;</text>
</g>
<g id="clust21" class="cluster">
<title>cluster_with_rop</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="1108.87,-2747 1108.87,-2977 1298.87,-2977 1298.87,-2747 1108.87,-2747"/>
</g>
<g id="clust22" class="cluster">
<title>cluster_info_exposures</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="1013.87,-4639 1013.87,-4797 1393.87,-4797 1393.87,-4639 1013.87,-4639"/>
</g>
<g id="clust24" class="cluster">
<title>cluster_transient_execution_vulnerabilities</title>
<g id="a_clust24"><a xlink:href="https://cwe.mitre.org/data/definitions/514.html" xlink:title="Transient Execution Vulnerabilities \n (Covert Channels, CWE&#45;514)">
<polygon fill="none" stroke="black" points="959.87,-894 959.87,-2486 1447.87,-2486 1447.87,-894 959.87,-894"/>
<text text-anchor="middle" x="1203.87" y="-2467.6" font-family="monospace" font-size="18.00">Transient Execution Vulnerabilities </text>
<text text-anchor="middle" x="1203.87" y="-2447.6" font-family="monospace" font-size="18.00"> (Covert Channels, CWE&#45;514)</text>
</a>
</g>
</g>
<g id="clust25" class="cluster">
<title>cluster_v1</title>
<g id="a_clust25"><a xlink:href="https://cwe.mitre.org/data/definitions/514.html">
<polygon fill="none" stroke="black" points="1018.37,-2050 1018.37,-2280 1389.37,-2280 1389.37,-2050 1018.37,-2050"/>
</a>
</g>
</g>
<g id="clust26" class="cluster">
<title>cluster_v2</title>
<g id="a_clust26"><a xlink:href="https://cwe.mitre.org/data/definitions/514.html">
<polygon fill="none" stroke="black" points="1030.37,-1867 1030.37,-2025 1377.37,-2025 1377.37,-1867 1030.37,-1867"/>
</a>
</g>
</g>
<g id="clust27" class="cluster">
<title>cluster_mds_all</title>
<g id="a_clust27"><a xlink:href="https://cwe.mitre.org/data/definitions/514.html" xlink:title="MDS (aka RIDL)">
<polygon fill="none" stroke="black" points="984.87,-1052 984.87,-1781 1422.87,-1781 1422.87,-1052 984.87,-1052"/>
<text text-anchor="middle" x="1203.87" y="-1762.6" font-family="monospace" font-size="18.00">MDS (aka RIDL)</text>
</a>
</g>
</g>
<g id="clust28" class="cluster">
<title>cluster_mds</title>
<g id="a_clust28"><a xlink:href="https://cwe.mitre.org/data/definitions/514.html">
<polygon fill="none" stroke="black" points="1009.87,-1282 1009.87,-1728 1397.87,-1728 1397.87,-1282 1009.87,-1282"/>
</a>
</g>
</g>
<g id="clust30" class="cluster">
<title>cluster_uaf_detection</title>
<polygon fill="none" stroke="black" stroke-dasharray="5,2" points="1459.72,-4097 1459.72,-4255 1706.69,-4255 1706.69,-4097 1459.72,-4097"/>
</g>
<!-- Mainline Defences -->
<g id="node1" class="node">
<title>Mainline Defences</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-133" rx="112.38" ry="18"/>
<text text-anchor="middle" x="203.54" y="-129.3" font-family="monospace" font-size="14.00">Mainline Defences</text>
</g>
<!-- Out&#45;of&#45;tree Defences -->
<g id="node2" class="node">
<title>Out&#45;of&#45;tree Defences</title>
<ellipse fill="cornflowerblue" stroke="cornflowerblue" cx="689.3" cy="-133" rx="128.88" ry="18"/>
<text text-anchor="middle" x="689.3" y="-129.3" font-family="monospace" font-size="14.00">Out&#45;of&#45;tree Defences</text>
</g>
<!-- Mainline Defences&#45;&gt;Out&#45;of&#45;tree Defences -->
<!-- Commercial Defences -->
<g id="node3" class="node">
<title>Commercial Defences</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="1203.87" cy="-133" rx="122.68" ry="18"/>
<text text-anchor="middle" x="1203.87" y="-129.3" font-family="monospace" font-size="14.00">Commercial Defences</text>
</g>
<!-- Out&#45;of&#45;tree Defences&#45;&gt;Commercial Defences -->
<!-- HW Defences -->
<g id="node4" class="node">
<title>HW Defences</title>
<ellipse fill="aquamarine" stroke="aquamarine" cx="1583.2" cy="-133" rx="79.89" ry="18"/>
<text text-anchor="middle" x="1583.2" y="-129.3" font-family="monospace" font-size="14.00">HW Defences</text>
</g>
<!-- Commercial Defences&#45;&gt;HW Defences -->
<!-- Generic Defence Techniques -->
<g id="node5" class="node">
<title>Generic Defence Techniques</title>
<ellipse fill="none" stroke="black" cx="203.54" cy="-61" rx="160.57" ry="18"/>
<text text-anchor="middle" x="203.54" y="-57.3" font-family="monospace" font-size="14.00">Generic Defence Techniques</text>
</g>
<!-- Bug Detection -->
<g id="node6" class="node">
<title>Bug Detection</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="787.77,-53.54 787.77,-68.46 730.09,-79 648.5,-79 590.82,-68.46 590.82,-53.54 648.5,-43 730.09,-43 787.77,-53.54"/>
<text text-anchor="middle" x="689.3" y="-57.3" font-family="monospace" font-size="14.00">Bug Detection</text>
</g>
<!-- Generic Defence Techniques&#45;&gt;Bug Detection -->
<!-- Vulnerabilities -->
<g id="node7" class="node">
<title>Vulnerabilities</title>
<polygon fill="pink" stroke="pink" points="1281.87,-79 1125.87,-79 1125.87,-43 1281.87,-43 1281.87,-79"/>
<text text-anchor="middle" x="1203.87" y="-57.3" font-family="monospace" font-size="14.00">Vulnerabilities</text>
</g>
<!-- Bug Detection&#45;&gt;Vulnerabilities -->
<!-- Exploitation Techniques -->
<g id="node8" class="node">
<title>Exploitation Techniques</title>
<polygon fill="gold" stroke="gold" points="1694.2,-79 1472.2,-79 1472.2,-43 1694.2,-43 1694.2,-79"/>
<text text-anchor="middle" x="1583.2" y="-57.3" font-family="monospace" font-size="14.00">Exploitation Techniques</text>
</g>
<!-- Vulnerabilities&#45;&gt;Exploitation Techniques -->
<!-- DEBUG_{LIST,SG,CREDENTIALS,NOTIFIERS,VIRTUAL} -->
<g id="node9" class="node">
<title>DEBUG_{LIST,SG,CREDENTIALS,NOTIFIERS,VIRTUAL}</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-635" rx="262.65" ry="18"/>
<text text-anchor="middle" x="689.3" y="-631.3" font-family="monospace" font-size="14.00">DEBUG_{LIST,SG,CREDENTIALS,NOTIFIERS,VIRTUAL}</text>
</g>
<!-- Metadata Corruption -->
<g id="node108" class="node">
<title>Metadata Corruption</title>
<polygon fill="gold" stroke="gold" points="1298.37,-509 1109.37,-509 1109.37,-473 1298.37,-473 1298.37,-509"/>
<text text-anchor="middle" x="1203.87" y="-487.3" font-family="monospace" font-size="14.00">Metadata Corruption</text>
</g>
<!-- DEBUG_{LIST,SG,CREDENTIALS,NOTIFIERS,VIRTUAL}&#45;&gt;Metadata Corruption -->
<g id="edge64" class="edge">
<title>DEBUG_{LIST,SG,CREDENTIALS,NOTIFIERS,VIRTUAL}:e&#45;&gt;Metadata Corruption:_</title>
<path fill="none" stroke="black" d="M951.87,-635C951.87,-635 1091.71,-554.78 1162.63,-514.09"/>
<polygon fill="black" stroke="black" points="1164.41,-517.1 1171.34,-509.09 1160.92,-511.03 1164.41,-517.1"/>
</g>
<!-- SLAB_FREELIST_RANDOM -->
<g id="node10" class="node">
<title>SLAB_FREELIST_RANDOM</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-995" rx="128.88" ry="18"/>
<text text-anchor="middle" x="689.3" y="-991.3" font-family="monospace" font-size="14.00">SLAB_FREELIST_RANDOM</text>
</g>
<!-- Heap Layout Control -->
<g id="node110" class="node">
<title>Heap Layout Control</title>
<polygon fill="gold" stroke="gold" points="1298.37,-869 1109.37,-869 1109.37,-833 1298.37,-833 1298.37,-869"/>
<text text-anchor="middle" x="1203.87" y="-847.3" font-family="monospace" font-size="14.00">Heap Layout Control</text>
</g>
<!-- SLAB_FREELIST_RANDOM&#45;&gt;Heap Layout Control -->
<g id="edge72" class="edge">
<title>SLAB_FREELIST_RANDOM:e&#45;&gt;Heap Layout Control:_</title>
<path fill="none" stroke="black" d="M819.3,-995C819.3,-995 1038.24,-912.8 1145.3,-872.61"/>
<polygon fill="black" stroke="black" points="1146.55,-875.88 1154.68,-869.09 1144.09,-869.33 1146.55,-875.88"/>
</g>
<!-- SHUFFLE_PAGE_ALLOCATOR -->
<g id="node11" class="node">
<title>SHUFFLE_PAGE_ALLOCATOR</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-923" rx="139.18" ry="18"/>
<text text-anchor="middle" x="689.3" y="-919.3" font-family="monospace" font-size="14.00">SHUFFLE_PAGE_ALLOCATOR</text>
</g>
<!-- SHUFFLE_PAGE_ALLOCATOR&#45;&gt;Heap Layout Control -->
<g id="edge74" class="edge">
<title>SHUFFLE_PAGE_ALLOCATOR:e&#45;&gt;Heap Layout Control:_</title>
<path fill="none" stroke="black" d="M829.3,-923C829.3,-923 988.66,-892.29 1099.21,-870.98"/>
<polygon fill="black" stroke="black" points="1099.93,-874.41 1109.09,-869.08 1098.6,-867.53 1099.93,-874.41"/>
</g>
<!-- STRICT_{KERNEL,MODULE}_RWX -->
<g id="node12" class="node">
<title>STRICT_{KERNEL,MODULE}_RWX</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-3202" rx="160.57" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3198.3" font-family="monospace" font-size="14.00">STRICT_{KERNEL,MODULE}_RWX</text>
</g>
<!-- WX Area Abuse -->
<g id="node113" class="node">
<title>WX Area Abuse</title>
<polygon fill="gold" stroke="gold" points="1273.87,-3257 1133.87,-3257 1133.87,-3221 1273.87,-3221 1273.87,-3257"/>
<text text-anchor="middle" x="1203.87" y="-3235.3" font-family="monospace" font-size="14.00">WX Area Abuse</text>
</g>
<!-- STRICT_{KERNEL,MODULE}_RWX&#45;&gt;WX Area Abuse -->
<g id="edge95" class="edge">
<title>STRICT_{KERNEL,MODULE}_RWX:e&#45;&gt;WX Area Abuse:_</title>
<path fill="none" stroke="black" d="M851.3,-3202C851.3,-3202 1020.02,-3219.76 1123.7,-3230.67"/>
<polygon fill="black" stroke="black" points="1123.52,-3234.17 1133.83,-3231.73 1124.25,-3227.21 1123.52,-3234.17"/>
</g>
<!-- DEBUG_WX -->
<g id="node13" class="node">
<title>DEBUG_WX</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-3346" rx="64.19" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3342.3" font-family="monospace" font-size="14.00">DEBUG_WX</text>
</g>
<!-- DEBUG_WX&#45;&gt;WX Area Abuse -->
<g id="edge96" class="edge">
<title>DEBUG_WX:e&#45;&gt;WX Area Abuse:_</title>
<path fill="none" stroke="black" d="M755.3,-3346C755.3,-3346 995.06,-3288.68 1123.61,-3257.95"/>
<polygon fill="black" stroke="black" points="1124.52,-3261.33 1133.43,-3255.6 1122.89,-3254.52 1124.52,-3261.33"/>
</g>
<!-- ARM: RODATA_FULL_DEFAULT_ENABLED -->
<g id="node14" class="node">
<title>ARM: RODATA_FULL_DEFAULT_ENABLED</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-3274" rx="193.07" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3270.3" font-family="monospace" font-size="14.00">ARM: RODATA_FULL_DEFAULT_ENABLED</text>
</g>
<!-- ARM: RODATA_FULL_DEFAULT_ENABLED&#45;&gt;WX Area Abuse -->
<g id="edge97" class="edge">
<title>ARM: RODATA_FULL_DEFAULT_ENABLED:e&#45;&gt;WX Area Abuse:_</title>
<path fill="none" stroke="black" d="M883.3,-3274C883.3,-3274 1028.75,-3258.07 1123.39,-3247.7"/>
<polygon fill="black" stroke="black" points="1123.97,-3251.16 1133.53,-3246.59 1123.21,-3244.2 1123.97,-3251.16"/>
</g>
<!-- BUG_ON_DATA_CORRUPTION -->
<g id="node15" class="node">
<title>BUG_ON_DATA_CORRUPTION</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-563" rx="139.18" ry="18"/>
<text text-anchor="middle" x="689.3" y="-559.3" font-family="monospace" font-size="14.00">BUG_ON_DATA_CORRUPTION</text>
</g>
<!-- BUG_ON_DATA_CORRUPTION&#45;&gt;Metadata Corruption -->
<g id="edge65" class="edge">
<title>BUG_ON_DATA_CORRUPTION:e&#45;&gt;Metadata Corruption:_</title>
<path fill="none" stroke="black" d="M829.3,-563C829.3,-563 988.66,-532.29 1099.21,-510.98"/>
<polygon fill="black" stroke="black" points="1099.93,-514.41 1109.09,-509.08 1098.6,-507.53 1099.93,-514.41"/>
</g>
<!-- MODULE_SIG* -->
<g id="node16" class="node">
<title>MODULE_SIG*</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-3706" rx="79.89" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3702.3" font-family="monospace" font-size="14.00">MODULE_SIG*</text>
</g>
<!-- Bad Module Loading -->
<g id="node115" class="node">
<title>Bad Module Loading</title>
<polygon fill="gold" stroke="gold" points="1294.37,-3580 1113.37,-3580 1113.37,-3544 1294.37,-3544 1294.37,-3580"/>
<text text-anchor="middle" x="1203.87" y="-3558.3" font-family="monospace" font-size="14.00">Bad Module Loading</text>
</g>
<!-- MODULE_SIG*&#45;&gt;Bad Module Loading -->
<g id="edge101" class="edge">
<title>MODULE_SIG*:e&#45;&gt;Bad Module Loading:_</title>
<path fill="none" stroke="black" d="M770.3,-3706C770.3,-3706 1018.21,-3623.47 1138.68,-3583.37"/>
<polygon fill="black" stroke="black" points="1140.14,-3586.57 1148.52,-3580.09 1137.93,-3579.93 1140.14,-3586.57"/>
</g>
<!-- SECURITY_LOADPIN -->
<g id="node17" class="node">
<title>SECURITY_LOADPIN</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-3634" rx="107.48" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3630.3" font-family="monospace" font-size="14.00">SECURITY_LOADPIN</text>
</g>
<!-- SECURITY_LOADPIN&#45;&gt;Bad Module Loading -->
<g id="edge102" class="edge">
<title>SECURITY_LOADPIN:e&#45;&gt;Bad Module Loading:_</title>
<path fill="none" stroke="black" d="M797.3,-3634C797.3,-3634 983.32,-3600.98 1103.4,-3579.66"/>
<polygon fill="black" stroke="black" points="1104.13,-3583.08 1113.36,-3577.89 1102.91,-3576.19 1104.13,-3583.08"/>
</g>
<!-- bpf_jit_harden -->
<g id="node18" class="node">
<title>bpf_jit_harden</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-3850" rx="96.38" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3846.3" font-family="monospace" font-size="14.00">bpf_jit_harden</text>
</g>
<!-- JIT Abuse -->
<g id="node112" class="node">
<title>JIT Abuse</title>
<polygon fill="gold" stroke="gold" points="1257.37,-3832 1150.37,-3832 1150.37,-3796 1257.37,-3796 1257.37,-3832"/>
<text text-anchor="middle" x="1203.87" y="-3810.3" font-family="monospace" font-size="14.00">JIT Abuse</text>
</g>
<!-- bpf_jit_harden&#45;&gt;JIT Abuse -->
<g id="edge93" class="edge">
<title>bpf_jit_harden:e&#45;&gt;JIT Abuse:_</title>
<path fill="none" stroke="black" d="M787.3,-3850C787.3,-3850 1023.92,-3829.5 1140.06,-3819.44"/>
<polygon fill="black" stroke="black" points="1140.58,-3822.91 1150.24,-3818.56 1139.97,-3815.94 1140.58,-3822.91"/>
</g>
<!-- DEFAULT_MMAP_MIN_ADDR=65536 -->
<g id="node19" class="node">
<title>DEFAULT_MMAP_MIN_ADDR=65536</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-2539" rx="165.97" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2535.3" font-family="monospace" font-size="14.00">DEFAULT_MMAP_MIN_ADDR=65536</text>
</g>
<!-- NULL Pointer Dereference (CWE&#45;476) -->
<g id="node121" class="node">
<title>NULL Pointer Dereference (CWE&#45;476)</title>
<g id="a_node121"><a xlink:href="https://cwe.mitre.org/data/definitions/476.html" xlink:title="NULL Pointer Dereference (CWE&#45;476)">
<polygon fill="pink" stroke="pink" points="1360.37,-2556 1047.37,-2556 1047.37,-2520 1360.37,-2520 1360.37,-2556"/>
<text text-anchor="middle" x="1203.87" y="-2534.3" font-family="monospace" font-size="14.00">NULL Pointer Dereference (CWE&#45;476)</text>
</a>
</g>
</g>
<!-- DEFAULT_MMAP_MIN_ADDR=65536&#45;&gt;NULL Pointer Dereference (CWE&#45;476) -->
<g id="edge86" class="edge">
<title>DEFAULT_MMAP_MIN_ADDR=65536:e&#45;&gt;NULL Pointer Dereference (CWE&#45;476):w</title>
<path fill="none" stroke="black" d="M856.3,-2539C856.3,-2539 996.3,-2538.26 1035.68,-2538.05"/>
<polygon fill="black" stroke="black" points="1035.89,-2541.55 1045.87,-2538 1035.85,-2534.55 1035.89,-2541.55"/>
</g>
<!-- SCHED_STACK_END_CHECK -->
<g id="node20" class="node">
<title>SCHED_STACK_END_CHECK</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-5151" rx="133.78" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5147.3" font-family="monospace" font-size="14.00">SCHED_STACK_END_CHECK</text>
</g>
<!-- Stack Depth Overflow (CWE&#45;674,?) -->
<g id="node99" class="node">
<title>Stack Depth Overflow (CWE&#45;674,?)</title>
<g id="a_node99"><a xlink:href="https://cwe.mitre.org/data/definitions/674.html" xlink:title="Stack Depth Overflow (CWE&#45;674,?)">
<polygon fill="pink" stroke="pink" points="1352.37,-5097 1055.37,-5097 1055.37,-5061 1352.37,-5061 1352.37,-5097"/>
<text text-anchor="middle" x="1203.87" y="-5075.3" font-family="monospace" font-size="14.00">Stack Depth Overflow (CWE&#45;674,?)</text>
</a>
</g>
</g>
<!-- SCHED_STACK_END_CHECK&#45;&gt;Stack Depth Overflow (CWE&#45;674,?) -->
<g id="edge49" class="edge">
<title>SCHED_STACK_END_CHECK:e&#45;&gt;Stack Depth Overflow (CWE&#45;674,?):_</title>
<path fill="none" stroke="black" d="M824.3,-5151C824.3,-5151 985.79,-5120.29 1097.83,-5098.98"/>
<polygon fill="black" stroke="black" points="1098.66,-5102.38 1107.83,-5097.08 1097.35,-5095.51 1098.66,-5102.38"/>
</g>
<!-- TIF_FSCHECK flag -->
<g id="node21" class="node">
<title>TIF_FSCHECK flag</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-5223" rx="107.48" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5219.3" font-family="monospace" font-size="14.00">TIF_FSCHECK flag</text>
</g>
<!-- Unbalanced set_fs() -->
<g id="node116" class="node">
<title>Unbalanced set_fs()</title>
<polygon fill="gold" stroke="gold" points="1298.37,-5241 1109.37,-5241 1109.37,-5205 1298.37,-5205 1298.37,-5241"/>
<text text-anchor="middle" x="1203.87" y="-5219.3" font-family="monospace" font-size="14.00">Unbalanced set_fs()</text>
</g>
<!-- TIF_FSCHECK flag&#45;&gt;Unbalanced set_fs() -->
<g id="edge105" class="edge">
<title>TIF_FSCHECK flag:e&#45;&gt;Unbalanced set_fs():_</title>
<path fill="none" stroke="black" d="M797.3,-5223C797.3,-5223 978.8,-5223 1098.97,-5223"/>
<polygon fill="black" stroke="black" points="1099.32,-5226.5 1109.32,-5223 1099.32,-5219.5 1099.32,-5226.5"/>
</g>
<!-- slab_nomerge -->
<g id="node22" class="node">
<title>slab_nomerge</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-851" rx="85.59" ry="18"/>
<text text-anchor="middle" x="689.3" y="-847.3" font-family="monospace" font-size="14.00">slab_nomerge</text>
</g>
<!-- slab_nomerge&#45;&gt;Heap Layout Control -->
<g id="edge73" class="edge">
<title>slab_nomerge:e&#45;&gt;Heap Layout Control:_</title>
<path fill="none" stroke="black" d="M776.3,-851C776.3,-851 972.9,-851 1099.16,-851"/>
<polygon fill="black" stroke="black" points="1099.26,-854.5 1109.26,-851 1099.26,-847.5 1099.26,-854.5"/>
</g>
<!-- LOCKDOWN_LSM -->
<g id="node23" class="node">
<title>LOCKDOWN_LSM</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-275" rx="85.59" ry="18"/>
<text text-anchor="middle" x="689.3" y="-271.3" font-family="monospace" font-size="14.00">LOCKDOWN_LSM</text>
</g>
<!-- Changing Kernel Image -->
<g id="node114" class="node">
<title>Changing Kernel Image</title>
<polygon fill="gold" stroke="gold" points="1306.87,-329 1100.87,-329 1100.87,-293 1306.87,-293 1306.87,-329"/>
<text text-anchor="middle" x="1203.87" y="-307.3" font-family="monospace" font-size="14.00">Changing Kernel Image</text>
</g>
<!-- LOCKDOWN_LSM&#45;&gt;Changing Kernel Image -->
<g id="edge98" class="edge">
<title>LOCKDOWN_LSM:e&#45;&gt;Changing Kernel Image:_</title>
<path fill="none" stroke="black" d="M776.3,-275C776.3,-275 964.18,-290.86 1090.57,-301.52"/>
<polygon fill="black" stroke="black" points="1090.44,-305.02 1100.7,-302.38 1091.03,-298.05 1090.44,-305.02"/>
</g>
<!-- unprivileged_userfaultfd=0 -->
<g id="node24" class="node">
<title>unprivileged_userfaultfd=0</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-779" rx="160.57" ry="18"/>
<text text-anchor="middle" x="689.3" y="-775.3" font-family="monospace" font-size="14.00">unprivileged_userfaultfd=0</text>
</g>
<!-- unprivileged_userfaultfd=0&#45;&gt;Heap Layout Control -->
<g id="edge75" class="edge">
<title>unprivileged_userfaultfd=0:e&#45;&gt;Heap Layout Control:_</title>
<path fill="none" stroke="black" d="M851.3,-779C851.3,-779 1000.67,-809.59 1104.69,-830.89"/>
<polygon fill="black" stroke="black" points="1104.11,-834.35 1114.61,-832.92 1105.51,-827.49 1104.11,-834.35"/>
</g>
<!-- LDISC_AUTOLOAD is not set -->
<g id="node25" class="node">
<title>LDISC_AUTOLOAD is not set</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-3562" rx="155.17" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3558.3" font-family="monospace" font-size="14.00">LDISC_AUTOLOAD is not set</text>
</g>
<!-- LDISC_AUTOLOAD is not set&#45;&gt;Bad Module Loading -->
<g id="edge104" class="edge">
<title>LDISC_AUTOLOAD is not set:e&#45;&gt;Bad Module Loading:_</title>
<path fill="none" stroke="black" d="M846.3,-3562C846.3,-3562 997.8,-3562 1103.29,-3562"/>
<polygon fill="black" stroke="black" points="1103.35,-3565.5 1113.35,-3562 1103.35,-3558.5 1103.35,-3565.5"/>
</g>
<!-- ARM: SHADOW_CALL_STACK -->
<g id="node26" class="node">
<title>ARM: SHADOW_CALL_STACK</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-2914" rx="139.18" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2910.3" font-family="monospace" font-size="14.00">ARM: SHADOW_CALL_STACK</text>
</g>
<!-- Return Address Overwrite -->
<g id="node128" class="node">
<title>Return Address Overwrite</title>
<polygon fill="gold" stroke="gold" points="1319.37,-3038 1088.37,-3038 1088.37,-3002 1319.37,-3002 1319.37,-3038"/>
<text text-anchor="middle" x="1203.87" y="-3016.3" font-family="monospace" font-size="14.00">Return Address Overwrite</text>
</g>
<!-- ARM: SHADOW_CALL_STACK&#45;&gt;Return Address Overwrite -->
<g id="edge78" class="edge">
<title>ARM: SHADOW_CALL_STACK:e&#45;&gt;Return Address Overwrite:w</title>
<path fill="none" stroke="black" d="M829.3,-2914C829.3,-2914 1030.93,-2996.98 1077.4,-3016.1"/>
<polygon fill="black" stroke="black" points="1076.29,-3019.43 1086.87,-3020 1078.96,-3012.96 1076.29,-3019.43"/>
</g>
<!-- STACKPROTECTOR -->
<g id="node27" class="node">
<title>STACKPROTECTOR</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-3058" rx="96.38" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3054.3" font-family="monospace" font-size="14.00">STACKPROTECTOR</text>
</g>
<!-- STACKPROTECTOR&#45;&gt;Return Address Overwrite -->
<g id="edge77" class="edge">
<title>STACKPROTECTOR:e&#45;&gt;Return Address Overwrite:w</title>
<path fill="none" stroke="black" d="M787.3,-3058C787.3,-3058 1024.92,-3027.86 1076.91,-3021.26"/>
<polygon fill="black" stroke="black" points="1077.39,-3024.73 1086.87,-3020 1076.51,-3017.79 1077.39,-3024.73"/>
</g>
<!-- ARM: KASAN_HW_TAGS with ARM64_MTE -->
<g id="node28" class="node">
<title>ARM: KASAN_HW_TAGS with ARM64_MTE</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-4212" rx="198.47" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4208.3" font-family="monospace" font-size="14.00">ARM: KASAN_HW_TAGS with ARM64_MTE</text>
</g>
<!-- Use&#45;After&#45;Free (CWE&#45;416) -->
<g id="node101" class="node">
<title>Use&#45;After&#45;Free (CWE&#45;416)</title>
<g id="a_node101"><a xlink:href="https://cwe.mitre.org/data/definitions/416.html" xlink:title="Use&#45;After&#45;Free (CWE&#45;416)">
<polygon fill="pink" stroke="pink" points="1319.37,-4388 1088.37,-4388 1088.37,-4352 1319.37,-4352 1319.37,-4388"/>
<text text-anchor="middle" x="1203.87" y="-4366.3" font-family="monospace" font-size="14.00">Use&#45;After&#45;Free (CWE&#45;416)</text>
</a>
</g>
</g>
<!-- ARM: KASAN_HW_TAGS with ARM64_MTE&#45;&gt;Use&#45;After&#45;Free (CWE&#45;416) -->
<g id="edge60" class="edge">
<title>ARM: KASAN_HW_TAGS with ARM64_MTE:e&#45;&gt;Use&#45;After&#45;Free (CWE&#45;416):w</title>
<path fill="none" stroke="black" d="M888.3,-4212C888.3,-4212 1041.69,-4334.05 1078.84,-4363.61"/>
<polygon fill="black" stroke="black" points="1076.87,-4366.51 1086.87,-4370 1081.23,-4361.03 1076.87,-4366.51"/>
</g>
<!-- Double Free (CWE&#45;415) -->
<g id="node102" class="node">
<title>Double Free (CWE&#45;415)</title>
<g id="a_node102"><a xlink:href="https://cwe.mitre.org/data/definitions/415.html" xlink:title="Double Free (CWE&#45;415)">
<polygon fill="pink" stroke="pink" points="1306.87,-4072 1100.87,-4072 1100.87,-4036 1306.87,-4036 1306.87,-4072"/>
<text text-anchor="middle" x="1203.87" y="-4050.3" font-family="monospace" font-size="14.00">Double Free (CWE&#45;415)</text>
</a>
</g>
</g>
<!-- ARM: KASAN_HW_TAGS with ARM64_MTE&#45;&gt;Double Free (CWE&#45;415) -->
<g id="edge62" class="edge">
<title>ARM: KASAN_HW_TAGS with ARM64_MTE:e&#45;&gt;Double Free (CWE&#45;415):w</title>
<path fill="none" stroke="black" d="M888.3,-4212C888.3,-4212 1053.19,-4088.86 1091.84,-4060"/>
<polygon fill="black" stroke="black" points="1093.95,-4062.79 1099.87,-4054 1089.77,-4057.18 1093.95,-4062.79"/>
</g>
<!-- Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119) -->
<g id="node118" class="node">
<title>Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119)</title>
<g id="a_node118"><a xlink:href="https://cwe.mitre.org/data/definitions/122.html" xlink:title="Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119)">
<polygon fill="pink" stroke="pink" points="1380.87,-4230 1026.87,-4230 1026.87,-4194 1380.87,-4194 1380.87,-4230"/>
<text text-anchor="middle" x="1203.87" y="-4208.3" font-family="monospace" font-size="14.00">Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119)</text>
</a>
</g>
</g>
<!-- ARM: KASAN_HW_TAGS with ARM64_MTE&#45;&gt;Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119) -->
<g id="edge51" class="edge">
<title>ARM: KASAN_HW_TAGS with ARM64_MTE:e&#45;&gt;Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119):w</title>
<path fill="none" stroke="black" d="M888.3,-4212C888.3,-4212 983.54,-4212 1015.53,-4212"/>
<polygon fill="black" stroke="black" points="1015.87,-4215.5 1025.87,-4212 1015.87,-4208.5 1015.87,-4215.5"/>
</g>
<!-- X86: mds=full,nosmt -->
<g id="node29" class="node">
<title>X86: mds=full,nosmt</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-1397" rx="122.68" ry="18"/>
<text text-anchor="middle" x="689.3" y="-1393.3" font-family="monospace" font-size="14.00">X86: mds=full,nosmt</text>
</g>
<!-- MSBDS / CVE&#45;2018&#45;12126 / Fallout -->
<g id="node147" class="node">
<title>MSBDS / CVE&#45;2018&#45;12126 / Fallout</title>
<polygon fill="pink" stroke="pink" points="1352.37,-1415 1055.37,-1415 1055.37,-1379 1352.37,-1379 1352.37,-1415"/>
<text text-anchor="middle" x="1203.87" y="-1393.3" font-family="monospace" font-size="14.00">MSBDS / CVE&#45;2018&#45;12126 / Fallout</text>
</g>
<!-- X86: mds=full,nosmt&#45;&gt;MSBDS / CVE&#45;2018&#45;12126 / Fallout -->
<g id="edge114" class="edge">
<title>X86: mds=full,nosmt:e&#45;&gt;MSBDS / CVE&#45;2018&#45;12126 / Fallout:_</title>
<path fill="none" stroke="black" d="M813.3,-1397C813.3,-1397 905.26,-1397 999.83,-1397"/>
<polygon fill="black" stroke="black" points="999.88,-1400.5 1009.88,-1397 999.88,-1393.5 999.88,-1400.5"/>
</g>
<!-- X86: l1tf=full,force -->
<g id="node30" class="node">
<title>X86: l1tf=full,force</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-1095" rx="128.88" ry="18"/>
<text text-anchor="middle" x="689.3" y="-1091.3" font-family="monospace" font-size="14.00">X86: l1tf=full,force</text>
</g>
<!-- L1TF / CVE&#45;2018&#45;3620,3646 / Foreshadow -->
<g id="node141" class="node">
<title>L1TF / CVE&#45;2018&#45;3620,3646 / Foreshadow</title>
<polygon fill="pink" stroke="pink" points="1376.87,-1027 1030.87,-1027 1030.87,-991 1376.87,-991 1376.87,-1027"/>
<text text-anchor="middle" x="1203.87" y="-1005.3" font-family="monospace" font-size="14.00">L1TF / CVE&#45;2018&#45;3620,3646 / Foreshadow</text>
</g>
<!-- X86: l1tf=full,force&#45;&gt;L1TF / CVE&#45;2018&#45;3620,3646 / Foreshadow -->
<g id="edge111" class="edge">
<title>X86: l1tf=full,force:e&#45;&gt;L1TF / CVE&#45;2018&#45;3620,3646 / Foreshadow:w</title>
<path fill="none" stroke="black" d="M819.3,-1095C819.3,-1095 979.8,-1029.45 1020.55,-1012.81"/>
<polygon fill="black" stroke="black" points="1021.94,-1016.02 1029.87,-1009 1019.29,-1009.54 1021.94,-1016.02"/>
</g>
<!-- L1DES / CVE&#45;2020&#45;0549 / CacheOut -->
<g id="node150" class="node">
<title>L1DES / CVE&#45;2020&#45;0549 / CacheOut</title>
<polygon fill="pink" stroke="pink" points="1352.37,-1113 1055.37,-1113 1055.37,-1077 1352.37,-1077 1352.37,-1113"/>
<text text-anchor="middle" x="1203.87" y="-1091.3" font-family="monospace" font-size="14.00">L1DES / CVE&#45;2020&#45;0549 / CacheOut</text>
</g>
<!-- X86: l1tf=full,force&#45;&gt;L1DES / CVE&#45;2020&#45;0549 / CacheOut -->
<g id="edge112" class="edge">
<title>X86: l1tf=full,force:e&#45;&gt;L1DES / CVE&#45;2020&#45;0549 / CacheOut:w</title>
<path fill="none" stroke="black" d="M819.3,-1095C819.3,-1095 998.89,-1095 1043.79,-1095"/>
<polygon fill="black" stroke="black" points="1043.87,-1098.5 1053.87,-1095 1043.87,-1091.5 1043.87,-1098.5"/>
</g>
<!-- Snoop / CVE&#45;2020&#45;0550 -->
<g id="node151" class="node">
<title>Snoop / CVE&#45;2020&#45;0550</title>
<polygon fill="pink" stroke="pink" points="1306.87,-1185 1100.87,-1185 1100.87,-1149 1306.87,-1149 1306.87,-1185"/>
<text text-anchor="middle" x="1203.87" y="-1163.3" font-family="monospace" font-size="14.00">Snoop / CVE&#45;2020&#45;0550</text>
</g>
<!-- X86: l1tf=full,force&#45;&gt;Snoop / CVE&#45;2020&#45;0550 -->
<g id="edge113" class="edge">
<title>X86: l1tf=full,force:e&#45;&gt;Snoop / CVE&#45;2020&#45;0550:w</title>
<path fill="none" stroke="black" d="M819.3,-1095C819.3,-1095 1039.9,-1151.61 1089.89,-1164.44"/>
<polygon fill="black" stroke="black" points="1089.32,-1167.9 1099.87,-1167 1091.06,-1161.12 1089.32,-1167.9"/>
</g>
<!-- XPFO -->
<g id="node31" class="node">
<title>XPFO</title>
<ellipse fill="cornflowerblue" stroke="cornflowerblue" cx="689.3" cy="-2986" rx="42.79" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2982.3" font-family="monospace" font-size="14.00">XPFO</text>
</g>
<!-- ret2dir + ROP -->
<g id="node125" class="node">
<title>ret2dir + ROP</title>
<polygon fill="gold" stroke="gold" points="1273.87,-2952 1133.87,-2952 1133.87,-2916 1273.87,-2916 1273.87,-2952"/>
<text text-anchor="middle" x="1203.87" y="-2930.3" font-family="monospace" font-size="14.00">ret2dir + ROP</text>
</g>
<!-- XPFO&#45;&gt;ret2dir + ROP -->
<g id="edge90" class="edge">
<title>XPFO:e&#45;&gt;ret2dir + ROP:_</title>
<path fill="none" stroke="black" d="M733.3,-2986C733.3,-2986 989.77,-2957.6 1123.63,-2942.77"/>
<polygon fill="black" stroke="black" points="1124.28,-2946.22 1133.84,-2941.64 1123.51,-2939.27 1124.28,-2946.22"/>
</g>
<!-- ret2dir -->
<g id="node127" class="node">
<title>ret2dir</title>
<polygon fill="gold" stroke="gold" points="1248.87,-3110 1158.87,-3110 1158.87,-3074 1248.87,-3074 1248.87,-3110"/>
<text text-anchor="middle" x="1203.87" y="-3088.3" font-family="monospace" font-size="14.00">ret2dir</text>
</g>
<!-- XPFO&#45;&gt;ret2dir -->
<g id="edge89" class="edge">
<title>XPFO:e&#45;&gt;ret2dir:_</title>
<path fill="none" stroke="black" d="M733.3,-2986C733.3,-2986 1025.16,-3051.88 1148.69,-3079.77"/>
<polygon fill="black" stroke="black" points="1148.17,-3083.24 1158.7,-3082.03 1149.71,-3076.41 1148.17,-3083.24"/>
</g>
<!-- PROTECTABLE_MEMORY -->
<g id="node32" class="node">
<title>PROTECTABLE_MEMORY</title>
<ellipse fill="cornflowerblue" stroke="cornflowerblue" cx="689.3" cy="-491" rx="117.78" ry="18"/>
<text text-anchor="middle" x="689.3" y="-487.3" font-family="monospace" font-size="14.00">PROTECTABLE_MEMORY</text>
</g>
<!-- PROTECTABLE_MEMORY&#45;&gt;Metadata Corruption -->
<g id="edge66" class="edge">
<title>PROTECTABLE_MEMORY:e&#45;&gt;Metadata Corruption:_</title>
<path fill="none" stroke="black" d="M808.3,-491C808.3,-491 982.39,-491 1099.29,-491"/>
<polygon fill="black" stroke="black" points="1099.36,-494.5 1109.36,-491 1099.36,-487.5 1099.36,-494.5"/>
</g>
<!-- request_module_cap() -->
<g id="node33" class="node">
<title>request_module_cap()</title>
<ellipse fill="cornflowerblue" stroke="cornflowerblue" cx="689.3" cy="-3490" rx="128.88" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3486.3" font-family="monospace" font-size="14.00">request_module_cap()</text>
</g>
<!-- request_module_cap()&#45;&gt;Bad Module Loading -->
<g id="edge103" class="edge">
<title>request_module_cap():e&#45;&gt;Bad Module Loading:_</title>
<path fill="none" stroke="black" d="M819.3,-3490C819.3,-3490 989.16,-3521.88 1102.81,-3543.22"/>
<polygon fill="black" stroke="black" points="1102.47,-3546.71 1112.94,-3545.12 1103.76,-3539.83 1102.47,-3546.71"/>
</g>
<!-- LKRG -->
<g id="node34" class="node">
<title>LKRG</title>
<ellipse fill="cornflowerblue" stroke="cornflowerblue" cx="689.3" cy="-347" rx="42.79" ry="18"/>
<text text-anchor="middle" x="689.3" y="-343.3" font-family="monospace" font-size="14.00">LKRG</text>
</g>
<!-- LKRG&#45;&gt;Metadata Corruption -->
<g id="edge68" class="edge">
<title>LKRG:e&#45;&gt;Metadata Corruption:_</title>
<path fill="none" stroke="black" d="M733.3,-347C733.3,-347 1003.5,-429.86 1133.97,-469.87"/>
<polygon fill="black" stroke="black" points="1133.29,-473.32 1143.88,-472.91 1135.34,-466.63 1133.29,-473.32"/>
</g>
<!-- LKRG&#45;&gt;Changing Kernel Image -->
<g id="edge99" class="edge">
<title>LKRG:e&#45;&gt;Changing Kernel Image:_</title>
<path fill="none" stroke="black" d="M733.3,-347C733.3,-347 951.5,-330.27 1090.42,-319.62"/>
<polygon fill="black" stroke="black" points="1090.99,-323.09 1100.69,-318.83 1090.45,-316.11 1090.99,-323.09"/>
</g>
<!-- GRKERNSEC_KSTACKOVERFLOW -->
<g id="node35" class="node">
<title>GRKERNSEC_KSTACKOVERFLOW</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-5079" rx="150.27" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5075.3" font-family="monospace" font-size="14.00">GRKERNSEC_KSTACKOVERFLOW</text>
</g>
<!-- GRKERNSEC_KSTACKOVERFLOW&#45;&gt;Stack Depth Overflow (CWE&#45;674,?) -->
<g id="edge47" class="edge">
<title>GRKERNSEC_KSTACKOVERFLOW:e&#45;&gt;Stack Depth Overflow (CWE&#45;674,?):_</title>
<path fill="none" stroke="black" d="M840.3,-5079C840.3,-5079 947.34,-5079 1045.1,-5079"/>
<polygon fill="black" stroke="black" points="1045.14,-5082.5 1055.14,-5079 1045.14,-5075.5 1045.14,-5082.5"/>
</g>
<!-- PAX_REFCOUNT -->
<g id="node36" class="node">
<title>PAX_REFCOUNT</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-5295" rx="85.59" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5291.3" font-family="monospace" font-size="14.00">PAX_REFCOUNT</text>
</g>
<!-- Int Overflow/Underflow (CWE&#45;190/191) -->
<g id="node100" class="node">
<title>Int Overflow/Underflow (CWE&#45;190/191)</title>
<g id="a_node100"><a xlink:href="https://cwe.mitre.org/data/definitions/190.html" xlink:title="Int Overflow/Underflow (CWE&#45;190/191)">
<polygon fill="pink" stroke="pink" points="1368.87,-5349 1038.87,-5349 1038.87,-5313 1368.87,-5313 1368.87,-5349"/>
<text text-anchor="middle" x="1203.87" y="-5327.3" font-family="monospace" font-size="14.00">Int Overflow/Underflow (CWE&#45;190/191)</text>
</a>
</g>
</g>
<!-- PAX_REFCOUNT&#45;&gt;Int Overflow/Underflow (CWE&#45;190/191) -->
<g id="edge54" class="edge">
<title>PAX_REFCOUNT:e&#45;&gt;Int Overflow/Underflow (CWE&#45;190/191):_</title>
<path fill="none" stroke="black" d="M776.3,-5295C776.3,-5295 910.68,-5306.34 1028.6,-5316.29"/>
<polygon fill="black" stroke="black" points="1028.6,-5319.81 1038.86,-5317.16 1029.19,-5312.83 1028.6,-5319.81"/>
</g>
<!-- PAX_SIZE_OVERFLOW -->
<g id="node37" class="node">
<title>PAX_SIZE_OVERFLOW</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-5367" rx="112.38" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5363.3" font-family="monospace" font-size="14.00">PAX_SIZE_OVERFLOW</text>
</g>
<!-- PAX_SIZE_OVERFLOW&#45;&gt;Int Overflow/Underflow (CWE&#45;190/191) -->
<g id="edge55" class="edge">
<title>PAX_SIZE_OVERFLOW:e&#45;&gt;Int Overflow/Underflow (CWE&#45;190/191):_</title>
<path fill="none" stroke="black" d="M803.3,-5367C803.3,-5367 920.95,-5356.4 1028.57,-5346.7"/>
<polygon fill="black" stroke="black" points="1028.97,-5350.18 1038.62,-5345.8 1028.35,-5343.21 1028.97,-5350.18"/>
</g>
<!-- PAX_USERCOPY -->
<g id="node38" class="node">
<title>PAX_USERCOPY</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-4284" rx="85.59" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4280.3" font-family="monospace" font-size="14.00">PAX_USERCOPY</text>
</g>
<!-- PAX_USERCOPY&#45;&gt;Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119) -->
<g id="edge50" class="edge">
<title>PAX_USERCOPY:e&#45;&gt;Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119):w</title>
<path fill="none" stroke="black" d="M776.3,-4284C776.3,-4284 969.95,-4228.13 1016.09,-4214.82"/>
<polygon fill="black" stroke="black" points="1017.23,-4218.13 1025.87,-4212 1015.29,-4211.41 1017.23,-4218.13"/>
</g>
<!-- Stack Out&#45;of&#45;Bounds Access (CWE&#45;121,119) -->
<g id="node119" class="node">
<title>Stack Out&#45;of&#45;Bounds Access (CWE&#45;121,119)</title>
<g id="a_node119"><a xlink:href="https://cwe.mitre.org/data/definitions/121.html" xlink:title="Stack Out&#45;of&#45;Bounds Access (CWE&#45;121,119)">
<polygon fill="pink" stroke="pink" points="1385.37,-4302 1022.37,-4302 1022.37,-4266 1385.37,-4266 1385.37,-4302"/>
<text text-anchor="middle" x="1203.87" y="-4280.3" font-family="monospace" font-size="14.00">Stack Out&#45;of&#45;Bounds Access (CWE&#45;121,119)</text>
</a>
</g>
</g>
<!-- PAX_USERCOPY&#45;&gt;Stack Out&#45;of&#45;Bounds Access (CWE&#45;121,119) -->
<g id="edge53" class="edge">
<title>PAX_USERCOPY:e&#45;&gt;Stack Out&#45;of&#45;Bounds Access (CWE&#45;121,119):w</title>
<path fill="none" stroke="black" d="M776.3,-4284C776.3,-4284 964.39,-4284 1010.67,-4284"/>
<polygon fill="black" stroke="black" points="1010.87,-4287.5 1020.87,-4284 1010.87,-4280.5 1010.87,-4287.5"/>
</g>
<!-- PAX_KERNEXEC -->
<g id="node39" class="node">
<title>PAX_KERNEXEC</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-3130" rx="85.59" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3126.3" font-family="monospace" font-size="14.00">PAX_KERNEXEC</text>
</g>
<!-- PAX_KERNEXEC&#45;&gt;WX Area Abuse -->
<g id="edge94" class="edge">
<title>PAX_KERNEXEC:e&#45;&gt;WX Area Abuse:_</title>
<path fill="none" stroke="black" d="M776.3,-3130C776.3,-3130 1000.81,-3187.37 1124.08,-3218.87"/>
<polygon fill="black" stroke="black" points="1123.31,-3222.28 1133.86,-3221.37 1125.04,-3215.5 1123.31,-3222.28"/>
</g>
<!-- ret2usr -->
<g id="node126" class="node">
<title>ret2usr</title>
<polygon fill="gold" stroke="gold" points="1248.87,-2722 1158.87,-2722 1158.87,-2686 1248.87,-2686 1248.87,-2722"/>
<text text-anchor="middle" x="1203.87" y="-2700.3" font-family="monospace" font-size="14.00">ret2usr</text>
</g>
<!-- PAX_KERNEXEC&#45;&gt;ret2usr -->
<g id="edge81" class="edge">
<title>PAX_KERNEXEC:e&#45;&gt;ret2usr:w</title>
<path fill="none" stroke="black" d="M776.3,-3130C776.3,-3130 1099.21,-2769.49 1150.92,-2711.76"/>
<polygon fill="black" stroke="black" points="1153.81,-2713.78 1157.87,-2704 1148.59,-2709.11 1153.81,-2713.78"/>
</g>
<!-- PAX_KERNEXEC&#45;&gt;ret2dir -->
<g id="edge88" class="edge">
<title>PAX_KERNEXEC:e&#45;&gt;ret2dir:_</title>
<path fill="none" stroke="black" d="M776.3,-3130C776.3,-3130 1034.05,-3107.04 1148.84,-3096.81"/>
<polygon fill="black" stroke="black" points="1149.18,-3100.3 1158.83,-3095.92 1148.56,-3093.32 1149.18,-3100.3"/>
</g>
<!-- GRKERNSEC_JIT_HARDEN -->
<g id="node40" class="node">
<title>GRKERNSEC_JIT_HARDEN</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-3778" rx="128.88" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3774.3" font-family="monospace" font-size="14.00">GRKERNSEC_JIT_HARDEN</text>
</g>
<!-- GRKERNSEC_JIT_HARDEN&#45;&gt;JIT Abuse -->
<g id="edge92" class="edge">
<title>GRKERNSEC_JIT_HARDEN:e&#45;&gt;JIT Abuse:_</title>
<path fill="none" stroke="black" d="M819.3,-3778C819.3,-3778 1031.39,-3797.91 1140.15,-3808.11"/>
<polygon fill="black" stroke="black" points="1140.06,-3811.62 1150.34,-3809.07 1140.71,-3804.65 1140.06,-3811.62"/>
</g>
<!-- PAX_MEMORY_STACKLEAK -->
<g id="node41" class="node">
<title>PAX_MEMORY_STACKLEAK</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-5007" rx="128.88" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5003.3" font-family="monospace" font-size="14.00">PAX_MEMORY_STACKLEAK</text>
</g>
<!-- PAX_MEMORY_STACKLEAK&#45;&gt;Stack Depth Overflow (CWE&#45;674,?) -->
<g id="edge48" class="edge">
<title>PAX_MEMORY_STACKLEAK:e&#45;&gt;Stack Depth Overflow (CWE&#45;674,?):_</title>
<path fill="none" stroke="black" d="M819.3,-5007C819.3,-5007 982.93,-5037.71 1096.44,-5059.02"/>
<polygon fill="black" stroke="black" points="1096.1,-5062.52 1106.58,-5060.92 1097.39,-5055.64 1096.1,-5062.52"/>
</g>
<!-- Uninitialized Memory Usage (CWE&#45;908) -->
<g id="node130" class="node">
<title>Uninitialized Memory Usage (CWE&#45;908)</title>
<g id="a_node130"><a xlink:href="https://cwe.mitre.org/data/definitions/908.html" xlink:title="Uninitialized Memory Usage (CWE&#45;908)">
<polygon fill="pink" stroke="pink" points="1368.87,-4700 1038.87,-4700 1038.87,-4664 1368.87,-4664 1368.87,-4700"/>
<text text-anchor="middle" x="1203.87" y="-4678.3" font-family="monospace" font-size="14.00">Uninitialized Memory Usage (CWE&#45;908)</text>
</a>
</g>
</g>
<!-- PAX_MEMORY_STACKLEAK&#45;&gt;Uninitialized Memory Usage (CWE&#45;908) -->
<g id="edge56" class="edge">
<title>PAX_MEMORY_STACKLEAK:e&#45;&gt;Uninitialized Memory Usage (CWE&#45;908):_</title>
<path fill="none" stroke="black" d="M819.3,-5007C819.3,-5007 950.43,-4895.9 1059.35,-4803.61"/>
<polygon fill="black" stroke="black" points="1061.78,-4806.13 1067.15,-4797 1057.25,-4800.79 1061.78,-4806.13"/>
</g>
<!-- GRKERNSEC_MODHARDEN -->
<g id="node42" class="node">
<title>GRKERNSEC_MODHARDEN</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-3418" rx="122.68" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3414.3" font-family="monospace" font-size="14.00">GRKERNSEC_MODHARDEN</text>
</g>
<!-- GRKERNSEC_MODHARDEN&#45;&gt;Bad Module Loading -->
<g id="edge100" class="edge">
<title>GRKERNSEC_MODHARDEN:e&#45;&gt;Bad Module Loading:_</title>
<path fill="none" stroke="black" d="M813.3,-3418C813.3,-3418 1035.67,-3500.2 1144.4,-3540.39"/>
<polygon fill="black" stroke="black" points="1143.33,-3543.72 1153.93,-3543.91 1145.76,-3537.16 1143.33,-3543.72"/>
</g>
<!-- grsecurity_hardened_usermodehelper -->
<g id="node43" class="node">
<title>grsecurity_hardened_usermodehelper</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-419" rx="150.27" ry="18"/>
<text text-anchor="middle" x="689.3" y="-415.3" font-family="monospace" font-size="14.00">by default in grsecurity</text>
</g>
<!-- grsecurity_hardened_usermodehelper&#45;&gt;Metadata Corruption -->
<g id="edge67" class="edge">
<title>grsecurity_hardened_usermodehelper:e&#45;&gt;Metadata Corruption:_</title>
<path fill="none" stroke="black" d="M840.3,-419C840.3,-419 994.66,-449.65 1101.94,-470.96"/>
<polygon fill="black" stroke="black" points="1101.36,-474.41 1111.85,-472.92 1102.72,-467.54 1101.36,-474.41"/>
</g>
<!-- AUTOSLAB -->
<g id="node44" class="node">
<title>AUTOSLAB</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-707" rx="64.19" ry="18"/>
<text text-anchor="middle" x="689.3" y="-703.3" font-family="monospace" font-size="14.00">AUTOSLAB</text>
</g>
<!-- AUTOSLAB&#45;&gt;Heap Layout Control -->
<g id="edge76" class="edge">
<title>AUTOSLAB:e&#45;&gt;Heap Layout Control:_</title>
<path fill="none" stroke="black" d="M755.3,-707C755.3,-707 1012.32,-789.69 1136.82,-829.75"/>
<polygon fill="black" stroke="black" points="1136.05,-833.18 1146.64,-832.91 1138.19,-826.51 1136.05,-833.18"/>
</g>
<!-- SMEP/PXN -->
<g id="node45" class="node">
<title>SMEP/PXN</title>
<ellipse fill="aquamarine" stroke="aquamarine" cx="689.3" cy="-2760" rx="64.19" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2756.3" font-family="monospace" font-size="14.00">SMEP/PXN</text>
</g>
<!-- SMEP/PXN&#45;&gt;ret2usr -->
<g id="edge83" class="edge">
<title>SMEP/PXN:e&#45;&gt;ret2usr:w</title>
<path fill="none" stroke="black" d="M755.3,-2760C755.3,-2760 1085.93,-2714.01 1147.92,-2705.38"/>
<polygon fill="black" stroke="black" points="1148.45,-2708.84 1157.87,-2704 1147.49,-2701.91 1148.45,-2708.84"/>
</g>
<!-- Control Flow Integrity -->
<g id="node46" class="node">
<title>Control Flow Integrity</title>
<ellipse fill="none" stroke="black" cx="689.3" cy="-2842" rx="139.18" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2838.3" font-family="monospace" font-size="14.00">Control Flow Integrity</text>
</g>
<!-- ROP -->
<g id="node123" class="node">
<title>ROP</title>
<polygon fill="gold" stroke="gold" points="1232.37,-2880 1175.37,-2880 1175.37,-2844 1232.37,-2844 1232.37,-2880"/>
<text text-anchor="middle" x="1203.87" y="-2858.3" font-family="monospace" font-size="14.00">ROP</text>
</g>
<!-- Control Flow Integrity&#45;&gt;ROP -->
<g id="edge80" class="edge">
<title>Control Flow Integrity:e&#45;&gt;ROP:_</title>
<path fill="none" stroke="black" d="M829.3,-2842C829.3,-2842 988.14,-2850.5 1098.67,-2856.42"/>
<polygon fill="black" stroke="black" points="1098.7,-2859.93 1108.88,-2856.97 1099.08,-2852.94 1098.7,-2859.93"/>
</g>
<!-- Control Flow Integrity&#45;&gt;Return Address Overwrite -->
<g id="edge79" class="edge">
<title>Control Flow Integrity:e&#45;&gt;Return Address Overwrite:w</title>
<path fill="none" stroke="black" d="M829.3,-2842C829.3,-2842 1034.51,-2983.81 1078.59,-3014.28"/>
<polygon fill="black" stroke="black" points="1076.66,-3017.19 1086.87,-3020 1080.64,-3011.44 1076.66,-3017.19"/>
</g>
<!-- mitigations=auto,nosmt -->
<g id="node47" class="node">
<title>mitigations=auto,nosmt</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-2323" rx="139.18" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2319.3" font-family="monospace" font-size="14.00">mitigations=auto,nosmt</text>
</g>
<!-- Spectre v3a / RSRE / CVE&#45;2018&#45;3640 -->
<g id="node139" class="node">
<title>Spectre v3a / RSRE / CVE&#45;2018&#45;3640</title>
<polygon fill="pink" stroke="pink" points="1360.37,-2341 1047.37,-2341 1047.37,-2305 1360.37,-2305 1360.37,-2341"/>
<text text-anchor="middle" x="1203.87" y="-2319.3" font-family="monospace" font-size="14.00">Spectre v3a / RSRE / CVE&#45;2018&#45;3640</text>
</g>
<!-- mitigations=auto,nosmt&#45;&gt;Spectre v3a / RSRE / CVE&#45;2018&#45;3640 -->
<g id="edge106" class="edge">
<title>mitigations=auto,nosmt:e&#45;&gt;Spectre v3a / RSRE / CVE&#45;2018&#45;3640:_</title>
<path fill="none" stroke="black" d="M838.38,-2323C856.39,-2323 899.25,-2323 949.52,-2323"/>
<polygon fill="black" stroke="black" points="949.87,-2326.5 959.87,-2323 949.87,-2319.5 949.87,-2326.5"/>
</g>
<!-- X86: MICROCODE -->
<g id="node48" class="node">
<title>X86: MICROCODE</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-2251" rx="96.38" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2247.3" font-family="monospace" font-size="14.00">X86: MICROCODE</text>
</g>
<!-- X86: pti=on (PAGE_TABLE_ISOLATION) -->
<g id="node49" class="node">
<title>X86: pti=on (PAGE_TABLE_ISOLATION)</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-2467" rx="203.36" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2463.3" font-family="monospace" font-size="14.00">X86: pti=on (PAGE_TABLE_ISOLATION)</text>
</g>
<!-- X86: pti=on (PAGE_TABLE_ISOLATION)&#45;&gt;ret2usr -->
<g id="edge82" class="edge">
<title>X86: pti=on (PAGE_TABLE_ISOLATION):e&#45;&gt;ret2usr:w</title>
<path fill="none" stroke="black" d="M902.73,-2474.58C942.63,-2510.46 1112.21,-2662.94 1150.27,-2697.16"/>
<polygon fill="black" stroke="black" points="1148.1,-2699.92 1157.87,-2704 1152.78,-2694.71 1148.1,-2699.92"/>
</g>
<!-- Spectre v3 / RDCL / CVE&#45;2017&#45;5754 / Meltdown -->
<g id="node138" class="node">
<title>Spectre v3 / RDCL / CVE&#45;2017&#45;5754 / Meltdown</title>
<polygon fill="pink" stroke="pink" points="1401.87,-2413 1005.87,-2413 1005.87,-2377 1401.87,-2377 1401.87,-2413"/>
<text text-anchor="middle" x="1203.87" y="-2391.3" font-family="monospace" font-size="14.00">Spectre v3 / RDCL / CVE&#45;2017&#45;5754 / Meltdown</text>
</g>
<!-- X86: pti=on (PAGE_TABLE_ISOLATION)&#45;&gt;Spectre v3 / RDCL / CVE&#45;2017&#45;5754 / Meltdown -->
<g id="edge109" class="edge">
<title>X86: pti=on (PAGE_TABLE_ISOLATION):e&#45;&gt;Spectre v3 / RDCL / CVE&#45;2017&#45;5754 / Meltdown:w</title>
<path fill="none" stroke="black" d="M902.72,-2461.51C923.21,-2448.17 975.46,-2414.15 996.2,-2400.65"/>
<polygon fill="black" stroke="black" points="998.4,-2403.39 1004.87,-2395 994.58,-2397.52 998.4,-2403.39"/>
</g>
<!-- ARM: kpti=on (UNMAP_KERNEL_AT_EL0) -->
<g id="node50" class="node">
<title>ARM: kpti=on (UNMAP_KERNEL_AT_EL0)</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-2395" rx="203.36" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2391.3" font-family="monospace" font-size="14.00">ARM: kpti=on (UNMAP_KERNEL_AT_EL0)</text>
</g>
<!-- SMAP/PAN -->
<g id="node51" class="node">
<title>SMAP/PAN</title>
<ellipse fill="aquamarine" stroke="aquamarine" cx="689.3" cy="-2688" rx="64.19" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2684.3" font-family="monospace" font-size="14.00">SMAP/PAN</text>
</g>
<!-- Userspace Data Access -->
<g id="node122" class="node">
<title>Userspace Data Access</title>
<polygon fill="gold" stroke="gold" points="1306.87,-2628 1100.87,-2628 1100.87,-2592 1306.87,-2592 1306.87,-2628"/>
<text text-anchor="middle" x="1203.87" y="-2606.3" font-family="monospace" font-size="14.00">Userspace Data Access</text>
</g>
<!-- SMAP/PAN&#45;&gt;Userspace Data Access -->
<g id="edge85" class="edge">
<title>SMAP/PAN:s&#45;&gt;Userspace Data Access:_</title>
<path fill="none" stroke="black" d="M774.04,-2659.27C838.72,-2651.83 930.37,-2641.31 1012.35,-2631.89"/>
<polygon fill="black" stroke="black" points="1012.84,-2635.35 1022.38,-2630.74 1012.04,-2628.4 1012.84,-2635.35"/>
</g>
<!-- ret2usr + ROP -->
<g id="node124" class="node">
<title>ret2usr + ROP</title>
<polygon fill="gold" stroke="gold" points="1273.87,-2808 1133.87,-2808 1133.87,-2772 1273.87,-2772 1273.87,-2808"/>
<text text-anchor="middle" x="1203.87" y="-2786.3" font-family="monospace" font-size="14.00">ret2usr + ROP</text>
</g>
<!-- SMAP/PAN&#45;&gt;ret2usr + ROP -->
<g id="edge87" class="edge">
<title>SMAP/PAN:s&#45;&gt;ret2usr + ROP:sw</title>
<path fill="none" stroke="black" d="M774.04,-2688.59C887.18,-2714.74 1078.74,-2759.02 1124.73,-2769.66"/>
<polygon fill="black" stroke="black" points="1124.34,-2773.16 1134.87,-2772 1125.92,-2766.34 1124.34,-2773.16"/>
</g>
<!-- SMAP/PAN&#45;&gt;ret2usr -->
<g id="edge84" class="edge">
<title>SMAP/PAN:s&#45;&gt;ret2usr:w</title>
<path fill="none" stroke="black" d="M774.04,-2675.33C892.76,-2684.2 1099.51,-2699.64 1147.65,-2703.24"/>
<polygon fill="black" stroke="black" points="1147.64,-2706.75 1157.87,-2704 1148.16,-2699.76 1147.64,-2706.75"/>
</g>
<!-- PAX_UDEREF -->
<g id="node52" class="node">
<title>PAX_UDEREF</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-2616" rx="74.99" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2612.3" font-family="monospace" font-size="14.00">PAX_UDEREF</text>
</g>
<!-- __read_only -->
<g id="node53" class="node">
<title>__read_only</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-5511" rx="79.89" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5507.3" font-family="monospace" font-size="14.00">__read_only</text>
</g>
<!-- &#39;ops&#39; Structures Overwrite -->
<g id="node117" class="node">
<title>&#39;ops&#39; Structures Overwrite</title>
<polygon fill="gold" stroke="gold" points="1327.37,-5529 1080.37,-5529 1080.37,-5493 1327.37,-5493 1327.37,-5529"/>
<text text-anchor="middle" x="1203.87" y="-5507.3" font-family="monospace" font-size="14.00">&#39;ops&#39; Structures Overwrite</text>
</g>
<!-- __read_only&#45;&gt;&#39;ops&#39; Structures Overwrite -->
<g id="edge71" class="edge">
<title>__read_only:e&#45;&gt;&#39;ops&#39; Structures Overwrite:_</title>
<path fill="none" stroke="black" d="M827.13,-5511C888.59,-5511 988.7,-5511 1070.13,-5511"/>
<polygon fill="black" stroke="black" points="1070.36,-5514.5 1080.36,-5511 1070.36,-5507.5 1070.36,-5514.5"/>
</g>
<!-- PAX_CONSTIFY_PLUGIN -->
<g id="node54" class="node">
<title>PAX_CONSTIFY_PLUGIN</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-5439" rx="122.68" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5435.3" font-family="monospace" font-size="14.00">PAX_CONSTIFY_PLUGIN</text>
</g>
<!-- RESPECTRE -->
<g id="node55" class="node">
<title>RESPECTRE</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-2179" rx="69.59" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2175.3" font-family="monospace" font-size="14.00">RESPECTRE</text>
</g>
<!-- Spectre v1 / BCB / CVE&#45;2017&#45;5753 -->
<g id="node133" class="node">
<title>Spectre v1 / BCB / CVE&#45;2017&#45;5753</title>
<polygon fill="pink" stroke="pink" points="1352.37,-2255 1055.37,-2255 1055.37,-2219 1352.37,-2219 1352.37,-2255"/>
<text text-anchor="middle" x="1203.87" y="-2233.3" font-family="monospace" font-size="14.00">Spectre v1 / BCB / CVE&#45;2017&#45;5753</text>
</g>
<!-- RESPECTRE&#45;&gt;Spectre v1 / BCB / CVE&#45;2017&#45;5753 -->
<g id="edge107" class="edge">
<title>RESPECTRE:e&#45;&gt;Spectre v1 / BCB / CVE&#45;2017&#45;5753:_</title>
<path fill="none" stroke="black" d="M891.48,-2196.19C928.17,-2201 968.86,-2206.33 1008.38,-2211.51"/>
<polygon fill="black" stroke="black" points="1008.01,-2214.99 1018.38,-2212.82 1008.92,-2208.05 1008.01,-2214.99"/>
</g>
<!-- Manual usage of nospec barriers -->
<g id="node56" class="node">
<title>Manual usage of nospec barriers</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-2107" rx="187.37" ry="18"/>
<text text-anchor="middle" x="689.3" y="-2103.3" font-family="monospace" font-size="14.00">Manual usage of nospec barriers</text>
</g>
<!-- X86: spectre_v2=on (RETPOLINE) -->
<g id="node57" class="node">
<title>X86: spectre_v2=on (RETPOLINE)</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-1982" rx="181.97" ry="18"/>
<text text-anchor="middle" x="689.3" y="-1978.3" font-family="monospace" font-size="14.00">X86: spectre_v2=on (RETPOLINE)</text>
</g>
<!-- Spectre v2 / BTI / CVE&#45;2017&#45;5715 -->
<g id="node136" class="node">
<title>Spectre v2 / BTI / CVE&#45;2017&#45;5715</title>
<polygon fill="pink" stroke="pink" points="1352.37,-2000 1055.37,-2000 1055.37,-1964 1352.37,-1964 1352.37,-2000"/>
<text text-anchor="middle" x="1203.87" y="-1978.3" font-family="monospace" font-size="14.00">Spectre v2 / BTI / CVE&#45;2017&#45;5715</text>
</g>
<!-- X86: spectre_v2=on (RETPOLINE)&#45;&gt;Spectre v2 / BTI / CVE&#45;2017&#45;5715 -->
<g id="edge108" class="edge">
<title>X86: spectre_v2=on (RETPOLINE):e&#45;&gt;Spectre v2 / BTI / CVE&#45;2017&#45;5715:_</title>
<path fill="none" stroke="black" d="M886.28,-1982C910.74,-1982 964.04,-1982 1020.06,-1982"/>
<polygon fill="black" stroke="black" points="1020.38,-1985.5 1030.38,-1982 1020.38,-1978.5 1020.38,-1985.5"/>
</g>
<!-- ARM: HARDEN_BRANCH_PREDICTOR -->
<g id="node58" class="node">
<title>ARM: HARDEN_BRANCH_PREDICTOR</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-1910" rx="171.67" ry="18"/>
<text text-anchor="middle" x="689.3" y="-1906.3" font-family="monospace" font-size="14.00">ARM: HARDEN_BRANCH_PREDICTOR</text>
</g>
<!-- X86: spec_store_bypass_disable=on -->
<g id="node59" class="node">
<title>X86: spec_store_bypass_disable=on</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-1824" rx="198.47" ry="18"/>
<text text-anchor="middle" x="689.3" y="-1820.3" font-family="monospace" font-size="14.00">X86: spec_store_bypass_disable=on</text>
</g>
<!-- Spectre v4 / SSB / CVE&#45;2018&#45;3639 -->
<g id="node140" class="node">
<title>Spectre v4 / SSB / CVE&#45;2018&#45;3639</title>
<polygon fill="pink" stroke="pink" points="1352.37,-1842 1055.37,-1842 1055.37,-1806 1352.37,-1806 1352.37,-1842"/>
<text text-anchor="middle" x="1203.87" y="-1820.3" font-family="monospace" font-size="14.00">Spectre v4 / SSB / CVE&#45;2018&#45;3639</text>
</g>
<!-- X86: spec_store_bypass_disable=on&#45;&gt;Spectre v4 / SSB / CVE&#45;2018&#45;3639 -->
<g id="edge110" class="edge">
<title>X86: spec_store_bypass_disable=on:e&#45;&gt;Spectre v4 / SSB / CVE&#45;2018&#45;3639:_</title>
<path fill="none" stroke="black" d="M902.53,-1824C928.63,-1824 986.87,-1824 1045.19,-1824"/>
<polygon fill="black" stroke="black" points="1045.26,-1827.5 1055.26,-1824 1045.26,-1820.5 1045.26,-1827.5"/>
</g>
<!-- ARM: ssbd=force&#45;on -->
<g id="node60" class="node">
<title>ARM: ssbd=force&#45;on</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-1752" rx="117.78" ry="18"/>
<text text-anchor="middle" x="689.3" y="-1748.3" font-family="monospace" font-size="14.00">ARM: ssbd=force&#45;on</text>
</g>
<!-- RANDOMIZE_{BASE,MEMORY} -->
<g id="node61" class="node">
<title>RANDOMIZE_{BASE,MEMORY}</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-5801" rx="144.07" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5797.3" font-family="monospace" font-size="14.00">RANDOMIZE_{BASE,MEMORY}</text>
</g>
<!-- GRKERNSEC_RANDSTRUCT -->
<g id="node62" class="node">
<title>GRKERNSEC_RANDSTRUCT</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-5729" rx="128.88" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5725.3" font-family="monospace" font-size="14.00">GRKERNSEC_RANDSTRUCT</text>
</g>
<!-- PAX_RANDKSTACK -->
<g id="node63" class="node">
<title>PAX_RANDKSTACK</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-5585" rx="96.38" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5581.3" font-family="monospace" font-size="14.00">PAX_RANDKSTACK</text>
</g>
<!-- Finding Kernel Objects -->
<g id="node111" class="node">
<title>Finding Kernel Objects</title>
<polygon fill="gold" stroke="gold" points="1310.87,-5603 1096.87,-5603 1096.87,-5567 1310.87,-5567 1310.87,-5603"/>
<text text-anchor="middle" x="1203.87" y="-5581.3" font-family="monospace" font-size="14.00">Finding Kernel Objects</text>
</g>
<!-- PAX_RANDKSTACK&#45;&gt;Finding Kernel Objects -->
<g id="edge91" class="edge">
<title>PAX_RANDKSTACK:e&#45;&gt;Finding Kernel Objects:_</title>
<path fill="none" stroke="black" d="M848.58,-5585C910.96,-5585 1009.2,-5585 1086.42,-5585"/>
<polygon fill="black" stroke="black" points="1086.66,-5588.5 1096.66,-5585 1086.66,-5581.5 1086.66,-5588.5"/>
</g>
<!-- PAX_LATENT_ENTROPY -->
<g id="node64" class="node">
<title>PAX_LATENT_ENTROPY</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-5657" rx="117.78" ry="18"/>
<text text-anchor="middle" x="689.3" y="-5653.3" font-family="monospace" font-size="14.00">PAX_LATENT_ENTROPY</text>
</g>
<!-- X86: X86_INTEL_UMIP -->
<g id="node65" class="node">
<title>X86: X86_INTEL_UMIP</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-4935" rx="122.68" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4931.3" font-family="monospace" font-size="14.00">X86: X86_INTEL_UMIP</text>
</g>
<!-- kptr_restrict -->
<g id="node66" class="node">
<title>kptr_restrict</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-4863" rx="90.98" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4859.3" font-family="monospace" font-size="14.00">kptr_restrict</text>
</g>
<!-- Info Exposure (CWE&#45;200) -->
<g id="node129" class="node">
<title>Info Exposure (CWE&#45;200)</title>
<g id="a_node129"><a xlink:href="https://cwe.mitre.org/data/definitions/200.html" xlink:title="Info Exposure (CWE&#45;200)">
<polygon fill="pink" stroke="pink" points="1314.87,-4772 1092.87,-4772 1092.87,-4736 1314.87,-4736 1314.87,-4772"/>
<text text-anchor="middle" x="1203.87" y="-4750.3" font-family="monospace" font-size="14.00">Info Exposure (CWE&#45;200)</text>
</a>
</g>
</g>
<!-- kptr_restrict&#45;&gt;Info Exposure (CWE&#45;200) -->
<g id="edge63" class="edge">
<title>kptr_restrict:e&#45;&gt;Info Exposure (CWE&#45;200):w</title>
<path fill="none" stroke="black" d="M827.13,-4846.91C901.51,-4820.81 1044.01,-4770.8 1082.24,-4757.38"/>
<polygon fill="black" stroke="black" points="1083.6,-4760.61 1091.87,-4754 1081.28,-4754.01 1083.6,-4760.61"/>
</g>
<!-- GRKERNSEC_HIDESYM -->
<g id="node67" class="node">
<title>GRKERNSEC_HIDESYM</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-4791" rx="112.38" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4787.3" font-family="monospace" font-size="14.00">GRKERNSEC_HIDESYM</text>
</g>
<!-- GRKERNSEC_DMESG -->
<g id="node68" class="node">
<title>GRKERNSEC_DMESG</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-4719" rx="101.28" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4715.3" font-family="monospace" font-size="14.00">GRKERNSEC_DMESG</text>
</g>
<!-- SLAB_FREELIST_HARDENED -->
<g id="node69" class="node">
<title>SLAB_FREELIST_HARDENED</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-3994" rx="139.18" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3990.3" font-family="monospace" font-size="14.00">SLAB_FREELIST_HARDENED</text>
</g>
<!-- grsecurity_hardened_freelist -->
<g id="node70" class="node">
<title>grsecurity_hardened_freelist</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-3922" rx="150.27" ry="18"/>
<text text-anchor="middle" x="689.3" y="-3918.3" font-family="monospace" font-size="14.00">by default in grsecurity</text>
</g>
<!-- SLAB_FREELIST_HARDENED&#45;&gt;grsecurity_hardened_freelist -->
<g id="edge25" class="edge">
<title>SLAB_FREELIST_HARDENED:_&#45;&gt;grsecurity_hardened_freelist:_</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M689.3,-3975.86C689.3,-3963.91 689.3,-3951.95 689.3,-3940"/>
</g>
<!-- SLAB_FREELIST_HARDENED&#45;&gt;Double Free (CWE&#45;415) -->
<g id="edge61" class="edge">
<title>SLAB_FREELIST_HARDENED:e&#45;&gt;Double Free (CWE&#45;415):_</title>
<path fill="none" stroke="black" d="M829.3,-3994C829.3,-3994 980.59,-4018.3 1090.61,-4035.97"/>
<polygon fill="black" stroke="black" points="1090.36,-4039.47 1100.79,-4037.6 1091.47,-4032.56 1090.36,-4039.47"/>
</g>
<!-- Allocator Data Corruption -->
<g id="node109" class="node">
<title>Allocator Data Corruption</title>
<polygon fill="gold" stroke="gold" points="1323.37,-4000 1084.37,-4000 1084.37,-3964 1323.37,-3964 1323.37,-4000"/>
<text text-anchor="middle" x="1203.87" y="-3978.3" font-family="monospace" font-size="14.00">Allocator Data Corruption</text>
</g>
<!-- SLAB_FREELIST_HARDENED&#45;&gt;Allocator Data Corruption -->
<g id="edge70" class="edge">
<title>SLAB_FREELIST_HARDENED:e&#45;&gt;Allocator Data Corruption:_</title>
<path fill="none" stroke="black" d="M829.3,-3994C829.3,-3994 966.09,-3989.61 1074.13,-3986.14"/>
<polygon fill="black" stroke="black" points="1074.27,-3989.63 1084.16,-3985.81 1074.05,-3982.64 1074.27,-3989.63"/>
</g>
<!-- grsecurity_hardened_freelist&#45;&gt;Allocator Data Corruption -->
<g id="edge69" class="edge">
<title>grsecurity_hardened_freelist:e&#45;&gt;Allocator Data Corruption:_</title>
<path fill="none" stroke="black" d="M840.3,-3922C840.3,-3922 978.24,-3944.83 1083.96,-3962.32"/>
<polygon fill="black" stroke="black" points="1083.65,-3965.82 1094.09,-3964 1084.79,-3958.91 1083.65,-3965.82"/>
</g>
<!-- INIT_STACK_ALL_ZERO -->
<g id="node71" class="node">
<title>INIT_STACK_ALL_ZERO</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-4645" rx="122.68" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4641.3" font-family="monospace" font-size="14.00">INIT_STACK_ALL_ZERO</text>
</g>
<!-- PAX_MEMORY_STRUCTLEAK -->
<g id="node72" class="node">
<title>PAX_MEMORY_STRUCTLEAK</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="689.3" cy="-4573" rx="133.78" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4569.3" font-family="monospace" font-size="14.00">PAX_MEMORY_STRUCTLEAK</text>
</g>
<!-- PAX_MEMORY_STRUCTLEAK&#45;&gt;Uninitialized Memory Usage (CWE&#45;908) -->
<g id="edge57" class="edge">
<title>PAX_MEMORY_STRUCTLEAK:e&#45;&gt;Uninitialized Memory Usage (CWE&#45;908):_</title>
<path fill="none" stroke="black" d="M838.18,-4577C871.99,-4586.73 961.83,-4612.6 1043.87,-4636.22"/>
<polygon fill="black" stroke="black" points="1042.96,-4639.6 1053.53,-4639 1044.89,-4632.87 1042.96,-4639.6"/>
</g>
<!-- Heap free() Poisoning -->
<g id="node73" class="node">
<title>Heap free() Poisoning</title>
<ellipse fill="none" stroke="black" cx="689.3" cy="-4464" rx="133.78" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4460.3" font-family="monospace" font-size="14.00">Heap free() Poisoning</text>
</g>
<!-- Heap free() Poisoning&#45;&gt;Use&#45;After&#45;Free (CWE&#45;416) -->
<g id="edge59" class="edge">
<title>Heap free() Poisoning:s&#45;&gt;Use&#45;After&#45;Free (CWE&#45;416):_</title>
<path fill="none" stroke="black" d="M838.18,-4423.26C914.19,-4412.16 1005.62,-4398.81 1077.91,-4388.25"/>
<polygon fill="black" stroke="black" points="1078.87,-4391.65 1088.26,-4386.74 1077.85,-4384.72 1078.87,-4391.65"/>
</g>
<!-- Heap free() Poisoning&#45;&gt;Uninitialized Memory Usage (CWE&#45;908) -->
<g id="edge58" class="edge">
<title>Heap free() Poisoning:e&#45;&gt;Uninitialized Memory Usage (CWE&#45;908):_</title>
<path fill="none" stroke="black" d="M838.18,-4472C883,-4497.8 1026.25,-4580.29 1119.31,-4633.88"/>
<polygon fill="black" stroke="black" points="1117.79,-4637.05 1128.21,-4639 1121.29,-4630.98 1117.79,-4637.05"/>
</g>
<!-- init_on_alloc -->
<g id="node74" class="node">
<title>init_on_alloc</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-4392" rx="90.98" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4388.3" font-family="monospace" font-size="14.00">init_on_alloc</text>
</g>
<!-- FORTIFY_SOURCE -->
<g id="node75" class="node">
<title>FORTIFY_SOURCE</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-4140" rx="96.38" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4136.3" font-family="monospace" font-size="14.00">FORTIFY_SOURCE</text>
</g>
<!-- FORTIFY_SOURCE&#45;&gt;Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119) -->
<g id="edge52" class="edge">
<title>FORTIFY_SOURCE:e&#45;&gt;Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119):_</title>
<path fill="none" stroke="black" d="M800.48,-4142.28C830.4,-4147.47 906.94,-4160.73 985.32,-4174.31"/>
<polygon fill="black" stroke="black" points="984.92,-4177.79 995.38,-4176.05 986.12,-4170.89 984.92,-4177.79"/>
</g>
<!-- UBSAN_BOUNDS -->
<g id="node76" class="node">
<title>UBSAN_BOUNDS</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="689.3" cy="-4068" rx="85.59" ry="18"/>
<text text-anchor="middle" x="689.3" y="-4064.3" font-family="monospace" font-size="14.00">UBSAN_BOUNDS</text>
</g>
<!-- REFCOUNT_FULL -->
<g id="node77" class="node">
<title>REFCOUNT_FULL</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-5295" rx="90.98" ry="18"/>
<text text-anchor="middle" x="203.54" y="-5291.3" font-family="monospace" font-size="14.00">REFCOUNT_FULL</text>
</g>
<!-- REFCOUNT_FULL&#45;&gt;PAX_REFCOUNT -->
<g id="edge11" class="edge">
<title>REFCOUNT_FULL:e&#45;&gt;PAX_REFCOUNT:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M295.54,-5295C295.54,-5295 602.3,-5295 602.3,-5295"/>
</g>
<!-- HARDENED_USERCOPY -->
<g id="node78" class="node">
<title>HARDENED_USERCOPY</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-4248" rx="112.38" ry="18"/>
<text text-anchor="middle" x="203.54" y="-4244.3" font-family="monospace" font-size="14.00">HARDENED_USERCOPY</text>
</g>
<!-- HARDENED_USERCOPY&#45;&gt;PAX_USERCOPY -->
<g id="edge12" class="edge">
<title>HARDENED_USERCOPY:e&#45;&gt;PAX_USERCOPY:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M317.54,-4248C317.54,-4248 602.3,-4284 602.3,-4284"/>
</g>
<!-- PAGE_POISONING -->
<g id="node79" class="node">
<title>PAGE_POISONING</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-4392" rx="96.38" ry="18"/>
<text text-anchor="middle" x="203.54" y="-4388.3" font-family="monospace" font-size="14.00">PAGE_POISONING</text>
</g>
<!-- PAX_MEMORY_SANITIZE -->
<g id="node96" class="node">
<title>PAX_MEMORY_SANITIZE</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="203.54" cy="-4320" rx="122.68" ry="18"/>
<text text-anchor="middle" x="203.54" y="-4316.3" font-family="monospace" font-size="14.00">PAX_MEMORY_SANITIZE</text>
</g>
<!-- PAGE_POISONING&#45;&gt;PAX_MEMORY_SANITIZE -->
<g id="edge13" class="edge">
<title>PAGE_POISONING:_&#45;&gt;PAX_MEMORY_SANITIZE:_</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M203.54,-4373.86C203.54,-4361.91 203.54,-4349.95 203.54,-4338"/>
</g>
<!-- VMAP_STACK -->
<g id="node80" class="node">
<title>VMAP_STACK</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-5151" rx="74.99" ry="18"/>
<text text-anchor="middle" x="203.54" y="-5147.3" font-family="monospace" font-size="14.00">VMAP_STACK</text>
</g>
<!-- VMAP_STACK&#45;&gt;GRKERNSEC_KSTACKOVERFLOW -->
<g id="edge14" class="edge">
<title>VMAP_STACK:e&#45;&gt;GRKERNSEC_KSTACKOVERFLOW:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M279.54,-5151C279.54,-5151 538.3,-5079 538.3,-5079"/>
</g>
<!-- THREAD_INFO_IN_TASK -->
<g id="node81" class="node">
<title>THREAD_INFO_IN_TASK</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-5079" rx="122.68" ry="18"/>
<text text-anchor="middle" x="203.54" y="-5075.3" font-family="monospace" font-size="14.00">THREAD_INFO_IN_TASK</text>
</g>
<!-- THREAD_INFO_IN_TASK&#45;&gt;GRKERNSEC_KSTACKOVERFLOW -->
<g id="edge15" class="edge">
<title>THREAD_INFO_IN_TASK:e&#45;&gt;GRKERNSEC_KSTACKOVERFLOW:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M327.54,-5079C327.54,-5079 538.3,-5079 538.3,-5079"/>
</g>
<!-- RANDSTRUCT -->
<g id="node82" class="node">
<title>RANDSTRUCT</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-5729" rx="74.99" ry="18"/>
<text text-anchor="middle" x="203.54" y="-5725.3" font-family="monospace" font-size="14.00">RANDSTRUCT</text>
</g>
<!-- RANDSTRUCT&#45;&gt;GRKERNSEC_RANDSTRUCT -->
<g id="edge16" class="edge">
<title>RANDSTRUCT:e&#45;&gt;GRKERNSEC_RANDSTRUCT:_</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M279.54,-5729C279.54,-5729 440.46,-5729 560.36,-5729"/>
</g>
<!-- STRUCTLEAK_BYREF_ALL -->
<g id="node83" class="node">
<title>STRUCTLEAK_BYREF_ALL</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-4608" rx="128.88" ry="18"/>
<text text-anchor="middle" x="203.54" y="-4604.3" font-family="monospace" font-size="14.00">STRUCTLEAK_BYREF_ALL</text>
</g>
<!-- STRUCTLEAK_BYREF_ALL&#45;&gt;PAX_MEMORY_STRUCTLEAK -->
<g id="edge17" class="edge">
<title>STRUCTLEAK_BYREF_ALL:e&#45;&gt;PAX_MEMORY_STRUCTLEAK:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M333.54,-4608C333.54,-4608 554.3,-4573 554.3,-4573"/>
</g>
<!-- LATENT_ENTROPY -->
<g id="node84" class="node">
<title>LATENT_ENTROPY</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-5657" rx="96.38" ry="18"/>
<text text-anchor="middle" x="203.54" y="-5653.3" font-family="monospace" font-size="14.00">LATENT_ENTROPY</text>
</g>
<!-- LATENT_ENTROPY&#45;&gt;PAX_LATENT_ENTROPY -->
<g id="edge18" class="edge">
<title>LATENT_ENTROPY:e&#45;&gt;PAX_LATENT_ENTROPY:_</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M301.54,-5657C301.54,-5657 457.61,-5657 571.47,-5657"/>
</g>
<!-- __ro_after_init -->
<g id="node85" class="node">
<title>__ro_after_init</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-5511" rx="101.28" ry="18"/>
<text text-anchor="middle" x="203.54" y="-5507.3" font-family="monospace" font-size="14.00">__ro_after_init</text>
</g>
<!-- __ro_after_init&#45;&gt;__read_only -->
<g id="edge19" class="edge">
<title>__ro_after_init:e&#45;&gt;__read_only:_</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M306.54,-5511C306.54,-5511 497.38,-5511 609.19,-5511"/>
</g>
<!-- SECURITY_DMESG_RESTRICT -->
<g id="node86" class="node">
<title>SECURITY_DMESG_RESTRICT</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-4719" rx="144.07" ry="18"/>
<text text-anchor="middle" x="203.54" y="-4715.3" font-family="monospace" font-size="14.00">SECURITY_DMESG_RESTRICT</text>
</g>
<!-- SECURITY_DMESG_RESTRICT&#45;&gt;GRKERNSEC_DMESG -->
<g id="edge20" class="edge">
<title>SECURITY_DMESG_RESTRICT:e&#45;&gt;GRKERNSEC_DMESG:_</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M349.54,-4719C349.54,-4719 487.72,-4719 587.57,-4719"/>
</g>
<!-- ARM: CPU_SW_DOMAIN_PAN -->
<g id="node87" class="node">
<title>ARM: CPU_SW_DOMAIN_PAN</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-2690" rx="139.18" ry="18"/>
<text text-anchor="middle" x="203.54" y="-2686.3" font-family="monospace" font-size="14.00">ARM: CPU_SW_DOMAIN_PAN</text>
</g>
<!-- ARM: CPU_SW_DOMAIN_PAN&#45;&gt;SMAP/PAN -->
<g id="edge22" class="edge">
<title>ARM: CPU_SW_DOMAIN_PAN:e&#45;&gt;SMAP/PAN:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M343.54,-2690C343.54,-2690 623.3,-2688 623.3,-2688"/>
</g>
<!-- ARM: ARM64_SW_TTBR0_PAN -->
<g id="node88" class="node">
<title>ARM: ARM64_SW_TTBR0_PAN</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-2618" rx="144.07" ry="18"/>
<text text-anchor="middle" x="203.54" y="-2614.3" font-family="monospace" font-size="14.00">ARM: ARM64_SW_TTBR0_PAN</text>
</g>
<!-- ARM: ARM64_SW_TTBR0_PAN&#45;&gt;SMAP/PAN -->
<g id="edge23" class="edge">
<title>ARM: ARM64_SW_TTBR0_PAN:e&#45;&gt;SMAP/PAN:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M349.54,-2618C349.54,-2618 623.3,-2688 623.3,-2688"/>
</g>
<!-- STATIC_USERMODEHELPER -->
<g id="node89" class="node">
<title>STATIC_USERMODEHELPER</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-419" rx="133.78" ry="18"/>
<text text-anchor="middle" x="203.54" y="-415.3" font-family="monospace" font-size="14.00">STATIC_USERMODEHELPER</text>
</g>
<!-- STATIC_USERMODEHELPER&#45;&gt;grsecurity_hardened_usermodehelper -->
<g id="edge24" class="edge">
<title>STATIC_USERMODEHELPER:e&#45;&gt;grsecurity_hardened_usermodehelper:_</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M338.54,-419C338.54,-419 443.89,-419 538.95,-419"/>
</g>
<!-- slub_debug=P -->
<g id="node90" class="node">
<title>slub_debug=P</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-4536" rx="85.59" ry="18"/>
<text text-anchor="middle" x="203.54" y="-4532.3" font-family="monospace" font-size="14.00">slub_debug=P</text>
</g>
<!-- slub_debug=P&#45;&gt;Heap free() Poisoning -->
<g id="edge27" class="edge">
<title>slub_debug=P:e&#45;&gt;Heap free() Poisoning:w</title>
<path fill="none" stroke="black" d="M290.54,-4536C290.54,-4536 554.3,-4464 554.3,-4464"/>
</g>
<!-- init_on_free -->
<g id="node91" class="node">
<title>init_on_free</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-4464" rx="85.59" ry="18"/>
<text text-anchor="middle" x="203.54" y="-4460.3" font-family="monospace" font-size="14.00">init_on_free</text>
</g>
<!-- init_on_free&#45;&gt;Heap free() Poisoning -->
<g id="edge28" class="edge">
<title>init_on_free:_&#45;&gt;Heap free() Poisoning:w</title>
<path fill="none" stroke="black" d="M289.65,-4464C393.18,-4464 554.3,-4464 554.3,-4464"/>
</g>
<!-- STACKLEAK -->
<g id="node92" class="node">
<title>STACKLEAK</title>
<ellipse fill="#7ccd7c" stroke="#7ccd7c" cx="203.54" cy="-5007" rx="69.59" ry="18"/>
<text text-anchor="middle" x="203.54" y="-5003.3" font-family="monospace" font-size="14.00">STACKLEAK</text>
</g>
<!-- STACKLEAK&#45;&gt;PAX_MEMORY_STACKLEAK -->
<g id="edge21" class="edge">
<title>STACKLEAK:e&#45;&gt;PAX_MEMORY_STACKLEAK:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M274.54,-5007C274.54,-5007 559.3,-5007 559.3,-5007"/>
</g>
<!-- RANDOMIZE_KSTACK_OFFSET_DEFAULT -->
<g id="node93" class="node">
<title>RANDOMIZE_KSTACK_OFFSET_DEFAULT</title>
<ellipse fill="cornflowerblue" stroke="cornflowerblue" cx="203.54" cy="-5585" rx="187.37" ry="18"/>
<text text-anchor="middle" x="203.54" y="-5581.3" font-family="monospace" font-size="14.00">RANDOMIZE_KSTACK_OFFSET_DEFAULT</text>
</g>
<!-- RANDOMIZE_KSTACK_OFFSET_DEFAULT&#45;&gt;PAX_RANDKSTACK -->
<g id="edge29" class="edge">
<title>RANDOMIZE_KSTACK_OFFSET_DEFAULT:e&#45;&gt;PAX_RANDKSTACK:_</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M390.72,-5585C390.72,-5585 505.87,-5585 592.91,-5585"/>
</g>
<!-- Clang CFI -->
<g id="node94" class="node">
<title>Clang CFI</title>
<ellipse fill="cornflowerblue" stroke="cornflowerblue" cx="203.54" cy="-2839" rx="69.59" ry="18"/>
<text text-anchor="middle" x="203.54" y="-2835.3" font-family="monospace" font-size="14.00">Clang CFI</text>
</g>
<!-- Clang CFI&#45;&gt;Control Flow Integrity -->
<g id="edge7" class="edge">
<title>Clang CFI:e&#45;&gt;Control Flow Integrity:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M274.54,-2839C274.54,-2839 549.3,-2842 549.3,-2842"/>
</g>
<!-- PAX_RAP -->
<g id="node95" class="node">
<title>PAX_RAP</title>
<ellipse fill="lightgrey" stroke="lightgrey" cx="203.54" cy="-2767" rx="58.49" ry="18"/>
<text text-anchor="middle" x="203.54" y="-2763.3" font-family="monospace" font-size="14.00">PAX_RAP</text>
</g>
<!-- PAX_RAP&#45;&gt;Control Flow Integrity -->
<g id="edge8" class="edge">
<title>PAX_RAP:e&#45;&gt;Control Flow Integrity:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M263.54,-2767C263.54,-2767 549.3,-2842 549.3,-2842"/>
</g>
<!-- PAX_MEMORY_SANITIZE&#45;&gt;Heap free() Poisoning -->
<g id="edge26" class="edge">
<title>PAX_MEMORY_SANITIZE:e&#45;&gt;Heap free() Poisoning:w</title>
<path fill="none" stroke="black" d="M327.54,-4320C327.54,-4320 554.3,-4464 554.3,-4464"/>
</g>
<!-- ARM: ARM64_PTR_AUTH + ARM64_BTI_KERNEL -->
<g id="node97" class="node">
<title>ARM: ARM64_PTR_AUTH + ARM64_BTI_KERNEL</title>
<ellipse fill="aquamarine" stroke="aquamarine" cx="203.54" cy="-2983" rx="153.78" ry="18"/>
<text text-anchor="middle" x="203.54" y="-2980.5" font-family="monospace" font-size="10.00">ARM: ARM64_PTR_AUTH + ARM64_BTI_KERNEL</text>
</g>
<!-- ARM: ARM64_PTR_AUTH + ARM64_BTI_KERNEL&#45;&gt;Control Flow Integrity -->
<g id="edge9" class="edge">
<title>ARM: ARM64_PTR_AUTH + ARM64_BTI_KERNEL:e&#45;&gt;Control Flow Integrity:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M358.54,-2983C358.54,-2983 549.3,-2842 549.3,-2842"/>
</g>
<!-- X86: Intel CET -->
<g id="node98" class="node">
<title>X86: Intel CET</title>
<ellipse fill="aquamarine" stroke="aquamarine" cx="203.54" cy="-2911" rx="96.38" ry="18"/>
<text text-anchor="middle" x="203.54" y="-2907.3" font-family="monospace" font-size="14.00">X86: Intel CET</text>
</g>
<!-- X86: Intel CET&#45;&gt;Control Flow Integrity -->
<g id="edge10" class="edge">
<title>X86: Intel CET:e&#45;&gt;Control Flow Integrity:w</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M301.54,-2911C301.54,-2911 549.3,-2842 549.3,-2842"/>
</g>
<!-- UBSAN -->
<g id="node152" class="node">
<title>UBSAN</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1635.32,-5359.54 1635.32,-5374.46 1604.79,-5385 1561.62,-5385 1531.09,-5374.46 1531.09,-5359.54 1561.62,-5349 1604.79,-5349 1635.32,-5359.54"/>
<text text-anchor="middle" x="1583.2" y="-5363.3" font-family="monospace" font-size="14.00">UBSAN</text>
</g>
<!-- Int Overflow/Underflow (CWE&#45;190/191)&#45;&gt;UBSAN -->
<g id="edge34" class="edge">
<title>Int Overflow/Underflow (CWE&#45;190/191):e&#45;&gt;UBSAN:_</title>
<path fill="none" stroke="black" d="M1379.96,-5332.71C1407.01,-5337.3 1482.52,-5350.1 1533.22,-5358.7"/>
<polygon fill="black" stroke="black" points="1380.32,-5329.22 1369.87,-5331 1379.15,-5336.12 1380.32,-5329.22"/>
</g>
<!-- KFENCE -->
<g id="node164" class="node">
<title>KFENCE</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1641.08,-4204.54 1641.08,-4219.46 1607.18,-4230 1559.23,-4230 1525.33,-4219.46 1525.33,-4204.54 1559.23,-4194 1607.18,-4194 1641.08,-4204.54"/>
<text text-anchor="middle" x="1583.2" y="-4208.3" font-family="monospace" font-size="14.00">KFENCE</text>
</g>
<!-- Use&#45;After&#45;Free (CWE&#45;416)&#45;&gt;KFENCE -->
<g id="edge31" class="edge">
<title>Use&#45;After&#45;Free (CWE&#45;416):e&#45;&gt;KFENCE:_</title>
<path fill="none" stroke="black" d="M1329.54,-4364.76C1357.4,-4347.92 1446.56,-4294.01 1511.08,-4255"/>
<polygon fill="black" stroke="black" points="1327.62,-4361.83 1320.87,-4370 1331.24,-4367.82 1327.62,-4361.83"/>
</g>
<!-- slub_debug=F -->
<g id="node161" class="node">
<title>slub_debug=F</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1675.93,-4010.54 1675.93,-4025.46 1621.61,-4036 1544.8,-4036 1490.48,-4025.46 1490.48,-4010.54 1544.8,-4000 1621.61,-4000 1675.93,-4010.54"/>
<text text-anchor="middle" x="1583.2" y="-4014.3" font-family="monospace" font-size="14.00">slub_debug=F</text>
</g>
<!-- Double Free (CWE&#45;415)&#45;&gt;slub_debug=F -->
<g id="edge44" class="edge">
<title>Double Free (CWE&#45;415):_&#45;&gt;slub_debug=F:_</title>
<path fill="none" stroke="black" d="M1317.09,-4043.29C1373.91,-4037.87 1441.86,-4031.39 1494.74,-4026.34"/>
<polygon fill="black" stroke="black" points="1316.61,-4039.82 1306.98,-4044.26 1317.27,-4046.79 1316.61,-4039.82"/>
</g>
<!-- KASAN_GENERIC -->
<g id="node163" class="node">
<title>KASAN_GENERIC</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1681.68,-4132.54 1681.68,-4147.46 1624,-4158 1542.41,-4158 1484.73,-4147.46 1484.73,-4132.54 1542.41,-4122 1624,-4122 1681.68,-4132.54"/>
<text text-anchor="middle" x="1583.2" y="-4136.3" font-family="monospace" font-size="14.00">KASAN_GENERIC</text>
</g>
<!-- Double Free (CWE&#45;415)&#45;&gt;KASAN_GENERIC -->
<g id="edge32" class="edge">
<title>Double Free (CWE&#45;415):e&#45;&gt;KASAN_GENERIC:_</title>
<path fill="none" stroke="black" d="M1317.63,-4057.06C1340.9,-4064.35 1402.06,-4083.53 1459.72,-4101.6"/>
<polygon fill="black" stroke="black" points="1318.46,-4053.65 1307.87,-4054 1316.37,-4060.33 1318.46,-4053.65"/>
</g>
<!-- Race Condition (CWE&#45;362) -->
<g id="node103" class="node">
<title>Race Condition (CWE&#45;362)</title>
<g id="a_node103"><a xlink:href="https://cwe.mitre.org/data/definitions/362.html" xlink:title="Race Condition (CWE&#45;362)">
<polygon fill="pink" stroke="pink" points="1319.37,-5675 1088.37,-5675 1088.37,-5639 1319.37,-5639 1319.37,-5675"/>
<text text-anchor="middle" x="1203.87" y="-5653.3" font-family="monospace" font-size="14.00">Race Condition (CWE&#45;362)</text>
</a>
</g>
</g>
<!-- KTSAN -->
<g id="node154" class="node">
<title>KTSAN</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1635.32,-5613.54 1635.32,-5628.46 1604.79,-5639 1561.62,-5639 1531.09,-5628.46 1531.09,-5613.54 1561.62,-5603 1604.79,-5603 1635.32,-5613.54"/>
<text text-anchor="middle" x="1583.2" y="-5617.3" font-family="monospace" font-size="14.00">KTSAN</text>
</g>
<!-- Race Condition (CWE&#45;362)&#45;&gt;KTSAN -->
<g id="edge36" class="edge">
<title>Race Condition (CWE&#45;362):e&#45;&gt;KTSAN:_</title>
<path fill="none" stroke="black" d="M1330.84,-5655.63C1363.25,-5651.16 1467.27,-5636.83 1530.89,-5628.07"/>
<polygon fill="black" stroke="black" points="1330.3,-5652.17 1320.87,-5657 1331.26,-5659.1 1330.3,-5652.17"/>
</g>
<!-- KCSAN -->
<g id="node155" class="node">
<title>KCSAN</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1635.32,-5685.54 1635.32,-5700.46 1604.79,-5711 1561.62,-5711 1531.09,-5700.46 1531.09,-5685.54 1561.62,-5675 1604.79,-5675 1635.32,-5685.54"/>
<text text-anchor="middle" x="1583.2" y="-5689.3" font-family="monospace" font-size="14.00">KCSAN</text>
</g>
<!-- Race Condition (CWE&#45;362)&#45;&gt;KCSAN -->
<g id="edge37" class="edge">
<title>Race Condition (CWE&#45;362):e&#45;&gt;KCSAN:_</title>
<path fill="none" stroke="black" d="M1330.84,-5658.37C1363.25,-5662.84 1467.27,-5677.17 1530.89,-5685.93"/>
<polygon fill="black" stroke="black" points="1331.26,-5654.9 1320.87,-5657 1330.3,-5661.83 1331.26,-5654.9"/>
</g>
<!-- Undefined Behaviour (CWE&#45;758) -->
<g id="node104" class="node">
<title>Undefined Behaviour (CWE&#45;758)</title>
<g id="a_node104"><a xlink:href="https://cwe.mitre.org/data/definitions/758.html" xlink:title="Undefined Behaviour (CWE&#45;758)">
<polygon fill="pink" stroke="pink" points="1339.87,-5421 1067.87,-5421 1067.87,-5385 1339.87,-5385 1339.87,-5421"/>
<text text-anchor="middle" x="1203.87" y="-5399.3" font-family="monospace" font-size="14.00">Undefined Behaviour (CWE&#45;758)</text>
</a>
</g>
</g>
<!-- Undefined Behaviour (CWE&#45;758)&#45;&gt;UBSAN -->
<g id="edge33" class="edge">
<title>Undefined Behaviour (CWE&#45;758):e&#45;&gt;UBSAN:_</title>
<path fill="none" stroke="black" d="M1351.05,-5401.48C1381.43,-5396.95 1472.96,-5383.3 1531.32,-5374.59"/>
<polygon fill="black" stroke="black" points="1350.25,-5398.06 1340.87,-5403 1351.28,-5404.99 1350.25,-5398.06"/>
</g>
<!-- Type Confusion (CWE&#45;843) -->
<g id="node105" class="node">
<title>Type Confusion (CWE&#45;843)</title>
<g id="a_node105"><a xlink:href="https://cwe.mitre.org/data/definitions/843.html" xlink:title="Type Confusion (CWE&#45;843)">
<polygon fill="pink" stroke="pink" points="1319.37,-5747 1088.37,-5747 1088.37,-5711 1319.37,-5711 1319.37,-5747"/>
<text text-anchor="middle" x="1203.87" y="-5725.3" font-family="monospace" font-size="14.00">Type Confusion (CWE&#45;843)</text>
</a>
</g>
</g>
<!-- Double Fetch (CWE&#45;367) -->
<g id="node106" class="node">
<title>Double Fetch (CWE&#45;367)</title>
<g id="a_node106"><a xlink:href="https://cwe.mitre.org/data/definitions/367.html" xlink:title="Double Fetch (CWE&#45;367)">
<polygon fill="pink" stroke="pink" points="1310.87,-5819 1096.87,-5819 1096.87,-5783 1310.87,-5783 1310.87,-5819"/>
<text text-anchor="middle" x="1203.87" y="-5797.3" font-family="monospace" font-size="14.00">Double Fetch (CWE&#45;367)</text>
</a>
</g>
</g>
<!-- Memory Leak (CWE&#45;401) -->
<g id="node107" class="node">
<title>Memory Leak (CWE&#45;401)</title>
<g id="a_node107"><a xlink:href="https://cwe.mitre.org/data/definitions/401.html" xlink:title="Memory Leak (CWE&#45;401)">
<polygon fill="pink" stroke="pink" points="1306.87,-5891 1100.87,-5891 1100.87,-5855 1306.87,-5855 1306.87,-5891"/>
<text text-anchor="middle" x="1203.87" y="-5869.3" font-family="monospace" font-size="14.00">Memory Leak (CWE&#45;401)</text>
</a>
</g>
</g>
<!-- KMEMLEAK -->
<g id="node156" class="node">
<title>KMEMLEAK</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1653,-5865.54 1653,-5880.46 1612.11,-5891 1554.3,-5891 1513.41,-5880.46 1513.41,-5865.54 1554.3,-5855 1612.11,-5855 1653,-5865.54"/>
<text text-anchor="middle" x="1583.2" y="-5869.3" font-family="monospace" font-size="14.00">KMEMLEAK</text>
</g>
<!-- Memory Leak (CWE&#45;401)&#45;&gt;KMEMLEAK -->
<g id="edge38" class="edge">
<title>Memory Leak (CWE&#45;401):e&#45;&gt;KMEMLEAK:_</title>
<path fill="none" stroke="black" d="M1318.03,-5873C1349.3,-5873 1446.04,-5873 1513.33,-5873"/>
<polygon fill="black" stroke="black" points="1317.87,-5869.5 1307.87,-5873 1317.87,-5876.5 1317.87,-5869.5"/>
</g>
<!-- Allocator Data Corruption&#45;&gt;slub_debug=F -->
<g id="edge45" class="edge">
<title>Allocator Data Corruption:_&#45;&gt;slub_debug=F:_</title>
<path fill="none" stroke="black" d="M1333.67,-3994.29C1386.83,-3999.36 1447.07,-4005.11 1494.93,-4009.67"/>
<polygon fill="black" stroke="black" points="1333.77,-3990.78 1323.49,-3993.32 1333.11,-3997.75 1333.77,-3990.78"/>
</g>
<!-- slub_debug=Z -->
<g id="node162" class="node">
<title>slub_debug=Z</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1675.93,-4290.54 1675.93,-4305.46 1621.61,-4316 1544.8,-4316 1490.48,-4305.46 1490.48,-4290.54 1544.8,-4280 1621.61,-4280 1675.93,-4290.54"/>
<text text-anchor="middle" x="1583.2" y="-4294.3" font-family="monospace" font-size="14.00">slub_debug=Z</text>
</g>
<!-- Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119)&#45;&gt;slub_debug=Z -->
<g id="edge43" class="edge">
<title>Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119):e&#45;&gt;slub_debug=Z:w</title>
<path fill="none" stroke="black" d="M1389.94,-4218.46C1414.9,-4238.46 1489.2,-4298 1489.2,-4298"/>
<polygon fill="black" stroke="black" points="1391.87,-4215.52 1381.87,-4212 1387.49,-4220.98 1391.87,-4215.52"/>
</g>
<!-- Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119)&#45;&gt;KFENCE -->
<g id="edge46" class="edge">
<title>Heap Out&#45;of&#45;Bounds Access (CWE&#45;122,119):e&#45;&gt;KFENCE:w</title>
<path fill="none" stroke="black" d="M1392.11,-4212C1424.74,-4212 1524.2,-4212 1524.2,-4212"/>
<polygon fill="black" stroke="black" points="1391.87,-4208.5 1381.87,-4212 1391.87,-4215.5 1391.87,-4208.5"/>
</g>
<!-- Global Variable Out&#45;of&#45;Bounds Access (CWE&#45;?,119) -->
<g id="node120" class="node">
<title>Global Variable Out&#45;of&#45;Bounds Access (CWE&#45;?,119)</title>
<g id="a_node120"><a xlink:href="https://cwe.mitre.org/data/definitions/119.html" xlink:title="Global Variable Out&#45;of&#45;Bounds Access (CWE&#45;?,119)">
<polygon fill="pink" stroke="pink" points="1387.37,-4158 1020.37,-4158 1020.37,-4122 1387.37,-4122 1387.37,-4158"/>
<text text-anchor="middle" x="1203.87" y="-4136.9" font-family="monospace" font-size="12.00">Global Variable Out&#45;of&#45;Bounds Access (CWE&#45;?,119)</text>
</a>
</g>
</g>
<!-- Global Variable Out&#45;of&#45;Bounds Access (CWE&#45;?,119)&#45;&gt;KASAN_GENERIC -->
<g id="edge30" class="edge">
<title>Global Variable Out&#45;of&#45;Bounds Access (CWE&#45;?,119):e&#45;&gt;KASAN_GENERIC:w</title>
<path fill="none" stroke="black" d="M1422.72,-4140C1449.77,-4140 1483.2,-4140 1483.2,-4140"/>
<polygon fill="black" stroke="black" points="1422.37,-4136.5 1412.37,-4140 1422.37,-4143.5 1422.37,-4136.5"/>
</g>
<!-- KMSAN -->
<g id="node153" class="node">
<title>KMSAN</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1635.32,-4674.54 1635.32,-4689.46 1604.79,-4700 1561.62,-4700 1531.09,-4689.46 1531.09,-4674.54 1561.62,-4664 1604.79,-4664 1635.32,-4674.54"/>
<text text-anchor="middle" x="1583.2" y="-4678.3" font-family="monospace" font-size="14.00">KMSAN</text>
</g>
<!-- Uninitialized Memory Usage (CWE&#45;908)&#45;&gt;KMSAN -->
<g id="edge35" class="edge">
<title>Uninitialized Memory Usage (CWE&#45;908):e&#45;&gt;KMSAN:_</title>
<path fill="none" stroke="black" d="M1403.87,-4682C1438.2,-4682 1491.64,-4682 1531.08,-4682"/>
<polygon fill="black" stroke="black" points="1403.87,-4678.5 1393.87,-4682 1403.87,-4685.5 1403.87,-4678.5"/>
</g>
<!-- Deadlock (CWE&#45;833) -->
<g id="node131" class="node">
<title>Deadlock (CWE&#45;833)</title>
<g id="a_node131"><a xlink:href="https://cwe.mitre.org/data/definitions/833.html" xlink:title="Deadlock (CWE&#45;833)">
<polygon fill="pink" stroke="pink" points="1294.37,-6107 1113.37,-6107 1113.37,-6071 1294.37,-6071 1294.37,-6107"/>
<text text-anchor="middle" x="1203.87" y="-6085.3" font-family="monospace" font-size="14.00">Deadlock (CWE&#45;833)</text>
</a>
</g>
</g>
<!-- PROVE_LOCKING -->
<g id="node157" class="node">
<title>PROVE_LOCKING</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1681.68,-6081.54 1681.68,-6096.46 1624,-6107 1542.41,-6107 1484.73,-6096.46 1484.73,-6081.54 1542.41,-6071 1624,-6071 1681.68,-6081.54"/>
<text text-anchor="middle" x="1583.2" y="-6085.3" font-family="monospace" font-size="14.00">PROVE_LOCKING</text>
</g>
<!-- Deadlock (CWE&#45;833)&#45;&gt;PROVE_LOCKING -->
<g id="edge39" class="edge">
<title>Deadlock (CWE&#45;833):_&#45;&gt;PROVE_LOCKING:w</title>
<path fill="none" stroke="black" d="M1304.6,-6089C1384.46,-6089 1483.2,-6089 1483.2,-6089"/>
<polygon fill="black" stroke="black" points="1304.47,-6085.5 1294.47,-6089 1304.47,-6092.5 1304.47,-6085.5"/>
</g>
<!-- DEBUG_ATOMIC_SLEEP -->
<g id="node158" class="node">
<title>DEBUG_ATOMIC_SLEEP</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1710.37,-6153.54 1710.37,-6168.46 1635.88,-6179 1530.53,-6179 1456.04,-6168.46 1456.04,-6153.54 1530.53,-6143 1635.88,-6143 1710.37,-6153.54"/>
<text text-anchor="middle" x="1583.2" y="-6157.3" font-family="monospace" font-size="14.00">DEBUG_ATOMIC_SLEEP</text>
</g>
<!-- Deadlock (CWE&#45;833)&#45;&gt;DEBUG_ATOMIC_SLEEP -->
<g id="edge40" class="edge">
<title>Deadlock (CWE&#45;833):_&#45;&gt;DEBUG_ATOMIC_SLEEP:w</title>
<path fill="none" stroke="black" d="M1277.68,-6109.88C1351.79,-6131.14 1455.87,-6161 1455.87,-6161"/>
<polygon fill="black" stroke="black" points="1278.46,-6106.47 1267.89,-6107.08 1276.53,-6113.2 1278.46,-6106.47"/>
</g>
<!-- Infinite Loop (CWE&#45;835) -->
<g id="node132" class="node">
<title>Infinite Loop (CWE&#45;835)</title>
<g id="a_node132"><a xlink:href="https://cwe.mitre.org/data/definitions/835.html" xlink:title="Infinite Loop (CWE&#45;835)">
<polygon fill="pink" stroke="pink" points="1314.87,-6035 1092.87,-6035 1092.87,-5999 1314.87,-5999 1314.87,-6035"/>
<text text-anchor="middle" x="1203.87" y="-6013.3" font-family="monospace" font-size="14.00">Infinite Loop (CWE&#45;835)</text>
</a>
</g>
</g>
<!-- LOCKUP_DETECTOR -->
<g id="node159" class="node">
<title>LOCKUP_DETECTOR</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1693.19,-5937.54 1693.19,-5952.46 1628.76,-5963 1537.65,-5963 1473.21,-5952.46 1473.21,-5937.54 1537.65,-5927 1628.76,-5927 1693.19,-5937.54"/>
<text text-anchor="middle" x="1583.2" y="-5941.3" font-family="monospace" font-size="14.00">LOCKUP_DETECTOR</text>
</g>
<!-- Infinite Loop (CWE&#45;835)&#45;&gt;LOCKUP_DETECTOR -->
<g id="edge41" class="edge">
<title>Infinite Loop (CWE&#45;835):_&#45;&gt;LOCKUP_DETECTOR:w</title>
<path fill="none" stroke="black" d="M1281.93,-5996.25C1360.9,-5974.98 1472.2,-5945 1472.2,-5945"/>
<polygon fill="black" stroke="black" points="1280.73,-5992.94 1271.99,-5998.92 1282.55,-5999.7 1280.73,-5992.94"/>
</g>
<!-- WQ_WATCHDOG -->
<g id="node160" class="node">
<title>WQ_WATCHDOG</title>
<polygon fill="mediumpurple" stroke="mediumpurple" points="1669.76,-6009.54 1669.76,-6024.46 1619.06,-6035 1547.35,-6035 1496.65,-6024.46 1496.65,-6009.54 1547.35,-5999 1619.06,-5999 1669.76,-6009.54"/>
<text text-anchor="middle" x="1583.2" y="-6013.3" font-family="monospace" font-size="14.00">WQ_WATCHDOG</text>
</g>
<!-- Infinite Loop (CWE&#45;835)&#45;&gt;WQ_WATCHDOG -->
<g id="edge42" class="edge">
<title>Infinite Loop (CWE&#45;835):_&#45;&gt;WQ_WATCHDOG:w</title>
<path fill="none" stroke="black" d="M1325.23,-6017C1405.06,-6017 1495.2,-6017 1495.2,-6017"/>
<polygon fill="black" stroke="black" points="1325.05,-6013.5 1315.05,-6017 1325.05,-6020.5 1325.05,-6013.5"/>
</g>
<!-- Spectre v1.1 / BCBS / CVE&#45;2018&#45;3693 -->
<g id="node134" class="node">
<title>Spectre v1.1 / BCBS / CVE&#45;2018&#45;3693</title>
<polygon fill="pink" stroke="pink" points="1364.37,-2183 1043.37,-2183 1043.37,-2147 1364.37,-2147 1364.37,-2183"/>
<text text-anchor="middle" x="1203.87" y="-2161.3" font-family="monospace" font-size="14.00">Spectre v1.1 / BCBS / CVE&#45;2018&#45;3693</text>
</g>
<!-- Spectre v1 swapgs / CVE&#45;2019&#45;1125 -->
<g id="node135" class="node">
<title>Spectre v1 swapgs / CVE&#45;2019&#45;1125</title>
<polygon fill="pink" stroke="pink" points="1356.37,-2111 1051.37,-2111 1051.37,-2075 1356.37,-2075 1356.37,-2111"/>
<text text-anchor="middle" x="1203.87" y="-2089.3" font-family="monospace" font-size="14.00">Spectre v1 swapgs / CVE&#45;2019&#45;1125</text>
</g>
<!-- Spectre RSB / CVE&#45;2018&#45;15572 -->
<g id="node137" class="node">
<title>Spectre RSB / CVE&#45;2018&#45;15572</title>
<polygon fill="pink" stroke="pink" points="1335.87,-1928 1071.87,-1928 1071.87,-1892 1335.87,-1892 1335.87,-1928"/>
<text text-anchor="middle" x="1203.87" y="-1906.3" font-family="monospace" font-size="14.00">Spectre RSB / CVE&#45;2018&#45;15572</text>
</g>
<!-- Lazy FP State Restore / CVE&#45;2018&#45;3665 -->
<g id="node142" class="node">
<title>Lazy FP State Restore / CVE&#45;2018&#45;3665</title>
<polygon fill="pink" stroke="pink" points="1372.87,-955 1034.87,-955 1034.87,-919 1372.87,-919 1372.87,-955"/>
<text text-anchor="middle" x="1203.87" y="-933.3" font-family="monospace" font-size="14.00">Lazy FP State Restore / CVE&#45;2018&#45;3665</text>
</g>
<!-- MFBDS / CVE&#45;2018&#45;12130 / ZombieLoad -->
<g id="node143" class="node">
<title>MFBDS / CVE&#45;2018&#45;12130 / ZombieLoad</title>
<polygon fill="pink" stroke="pink" points="1364.37,-1703 1043.37,-1703 1043.37,-1667 1364.37,-1667 1364.37,-1703"/>
<text text-anchor="middle" x="1203.87" y="-1681.3" font-family="monospace" font-size="14.00">MFBDS / CVE&#45;2018&#45;12130 / ZombieLoad</text>
</g>
<!-- MLPDS / CVE&#45;2018&#45;12127 -->
<g id="node144" class="node">
<title>MLPDS / CVE&#45;2018&#45;12127</title>
<polygon fill="pink" stroke="pink" points="1310.87,-1631 1096.87,-1631 1096.87,-1595 1310.87,-1595 1310.87,-1631"/>
<text text-anchor="middle" x="1203.87" y="-1609.3" font-family="monospace" font-size="14.00">MLPDS / CVE&#45;2018&#45;12127</text>
</g>
<!-- MDSUM / CVE&#45;2019&#45;11091 -->
<g id="node145" class="node">
<title>MDSUM / CVE&#45;2019&#45;11091</title>
<polygon fill="pink" stroke="pink" points="1310.87,-1559 1096.87,-1559 1096.87,-1523 1310.87,-1523 1310.87,-1559"/>
<text text-anchor="middle" x="1203.87" y="-1537.3" font-family="monospace" font-size="14.00">MDSUM / CVE&#45;2019&#45;11091</text>
</g>
<!-- TAA / CVE&#45;2019&#45;11135 / ZombieLoad v2  -->
<g id="node146" class="node">
<title>TAA / CVE&#45;2019&#45;11135 / ZombieLoad v2 </title>
<polygon fill="pink" stroke="pink" points="1372.87,-1487 1034.87,-1487 1034.87,-1451 1372.87,-1451 1372.87,-1487"/>
<text text-anchor="middle" x="1203.87" y="-1465.3" font-family="monospace" font-size="14.00">TAA / CVE&#45;2019&#45;11135 / ZombieLoad v2 </text>
</g>
<!-- VRS / CVE&#45;2020&#45;0548 -->
<g id="node148" class="node">
<title>VRS / CVE&#45;2020&#45;0548</title>
<polygon fill="pink" stroke="pink" points="1298.37,-1343 1109.37,-1343 1109.37,-1307 1298.37,-1307 1298.37,-1343"/>
<text text-anchor="middle" x="1203.87" y="-1321.3" font-family="monospace" font-size="14.00">VRS / CVE&#45;2020&#45;0548</text>
</g>
<!-- SRBDS / CVE&#45;2020&#45;0543 / CROSSTalk -->
<g id="node149" class="node">
<title>SRBDS / CVE&#45;2020&#45;0543 / CROSSTalk</title>
<polygon fill="pink" stroke="pink" points="1356.37,-1257 1051.37,-1257 1051.37,-1221 1356.37,-1221 1356.37,-1257"/>
<text text-anchor="middle" x="1203.87" y="-1235.3" font-family="monospace" font-size="14.00">SRBDS / CVE&#45;2020&#45;0543 / CROSSTalk</text>
</g>
</g>
</svg>