Fuzzing the Native NTFS Read-Write Driver (NTFS3) in the Linux Kernel

In 1993, Microsoft introduced the proprietary NTFS with Windows NT 3.1. Over two decades later, the full-fledged NTFS native driver, dubbed NTFS3, contributed to the Linux kernel in late 2021 by Paragon Software. As a new and complicated subsystem in the Linux kernel, NTFS3 is a good target for hackers and security researchers. Based on that, we started using system call fuzzers (e.g., syzkaller, Trinity, etc.) for identifying vulnerabilities in NTFS3. However, as shown in previous context-aware fuzzing efforts, we need a more efficient way to skip invaluable paths generated by the random mutation. We chose to leverage and improve the context-aware file system fuzzer, Janus, to fuzz NTFS3..... By: Edward Lo , Chiachih Wu Full Abstract and Presentation Materials: #fuzzing-the-native-ntfs-read-write-driver-ntfs-in-the-linux-kernel-31229