Zero-Trust Hardening Center

Aggregated verification results and diagnostic overview

✓ ZERO-TRUST PILLARS ACTIVE
10%
Security Posture
  • Kernel Version 7.0.8-200.fc44.x86_64
  • Toolchain Compiler gcc
  • Last Scan Time 2026-05-17 12:44:57
Hardening Checklist 🛡️
0/1
1 configuration checks failed
Architecture Risks 🏗️
4
Found 0 critical & 4 high severity issues
Static Analysis 🔎
44
Issues reported by compiler tools
Unit Test Coverage 🧪
98.1%
364 / 371 statements hit dynamically (CMocka)

Verified Kernel Modules

📦
buffer_overflow.ko
/home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/buffer_overflow.ko
350.7 KB
📦
use_after_free.ko
/home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/use_after_free.ko
362.6 KB
📦
hello_secure.ko
/home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/hello_secure.ko
198.1 KB

Kernel Hardening Checklist

Verification of security compiler definitions and options

Configuration Option Priority Target State Status

Architectural Vulnerabilities

Structural vulnerability analysis scan powered by IBM Bob Engine

Compiler Static Analysis Diagnostics

Raw logs, build warnings, and syntax error breakdowns

⚠️
Missing Environment Header Dependency
Standard static analysis parsing detected that compiler headers (e.g. asm/rwonce.h) are not found in the current static environment paths. This causes analyzers to fail compilation early and report parse failures (syntax errors), limiting depth check scans. Remediation: Please configure your target architecture build paths or install kernel-devel on Fedora to fully resolve static compiler checks.
Clang Static Analyzer Cppcheck XML Engine Sparse (Kernel Checker)
In file included from /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/buffer_overflow.c:17: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/init.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h:5: /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:10: fatal error: 'asm/rwonce.h' file not found 372 | #include <asm/rwonce.h> | ^~~~~~~~~~~~~~ 1 error generated. In file included from /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/use_after_free.mod.c:1: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/module.h:12: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/list.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/container_of.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h:5: /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:10: fatal error: 'asm/rwonce.h' file not found 372 | #include <asm/rwonce.h> | ^~~~~~~~~~~~~~ 1 error generated. In file included from /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/buffer_overflow.mod.c:1: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/module.h:12: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/list.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/container_of.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h:5: /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:10: fatal error: 'asm/rwonce.h' file not found 372 | #include <asm/rwonce.h> | ^~~~~~~~~~~~~~ 1 error generated. In file included from /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/use_after_free.c:17: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/init.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h:5: /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:10: fatal error: 'asm/rwonce.h' file not found 372 | #include <asm/rwonce.h> | ^~~~~~~~~~~~~~ 1 error generated. In file included from /home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/hello_secure.mod.c:1: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/module.h:12: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/list.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/container_of.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h:5: /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:10: fatal error: 'asm/rwonce.h' file not found 372 | #include <asm/rwonce.h> | ^~~~~~~~~~~~~~ 1 error generated. In file included from /home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/buffer_overflow_secure.c:17: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/init.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h:5: /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:10: fatal error: 'asm/rwonce.h' file not found 372 | #include <asm/rwonce.h> | ^~~~~~~~~~~~~~ 1 error generated. In file included from /home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/hello_secure.c:13: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/init.h:5: In file included from /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h:5: /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:10: fatal error: 'asm/rwonce.h' file not found 372 | #include <asm/rwonce.h> | ^~~~~~~~~~~~~~ 1 error generated.
Checking /home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/buffer_overflow_secure.c ... /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:37:2: error: failed to evaluate #if condition, undefined function-like macro invocation: __has_attribute( ... ) [syntaxError] #if defined(CONFIG_DEBUG_INFO_BTF) && defined(CONFIG_PAHOLE_HAS_BTF_TAG) && \ ^ /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/buildid.h:17:2: error: failed to evaluate #if condition, undefined function-like macro invocation: IS_ENABLED( ... ) [syntaxError] #if IS_ENABLED(CONFIG_STACKTRACE_BUILD_ID) || IS_ENABLED(CONFIG_VMCORE_INFO) ^ /home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/buffer_overflow_secure.c:0:0: information: This file is not analyzed. No working configuration could be extracted. Use -v for more details. [noValidConfiguration] ^ 1/7 files checked 56% done Checking /home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/hello_secure.c ... /home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/hello_secure.c:0:0: information: This file is not analyzed. No working configuration could be extracted. Use -v for more details. [noValidConfiguration] ^ 2/7 files checked 63% done Checking /home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/hello_secure.mod.c ... /home/symtuh/Documents/Projects/Krynox-Nexus/src/examples/hello_secure.mod.c:0:0: information: This file is not analyzed. No working configuration could be extracted. Use -v for more details. [noValidConfiguration] ^ 3/7 files checked 65% done Checking /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/buffer_overflow.c ... /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/buffer_overflow.c:0:0: information: This file is not analyzed. No working configuration could be extracted. Use -v for more details. [noValidConfiguration] ^ 4/7 files checked 78% done Checking /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/buffer_overflow.mod.c ... /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/buffer_overflow.mod.c:0:0: information: This file is not analyzed. No working configuration could be extracted. Use -v for more details. [noValidConfiguration] ^ 5/7 files checked 79% done Checking /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/use_after_free.c ... /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/use_after_free.c:0:0: information: This file is not analyzed. No working configuration could be extracted. Use -v for more details. [noValidConfiguration] ^ 6/7 files checked 98% done Checking /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/use_after_free.mod.c ... /home/symtuh/Documents/Projects/Krynox-Nexus/src/vulnerable/use_after_free.mod.c:0:0: information: This file is not analyzed. No working configuration could be extracted. Use -v for more details. [noValidConfiguration] ^ 7/7 files checked 100% done nofile:0:0: information: Active checkers: There was critical errors (use --checkers-report=<filename> to see details) [checkersReport]
./vulnerable/buffer_overflow.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:29:5: warning: undefined preprocessor identifier '__STDC_VERSION__' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:90:5: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:111:56: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' ./vulnerable/buffer_overflow.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/init.h): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:11: error: unable to open 'asm/rwonce.h' ./vulnerable/use_after_free.mod.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:29:5: warning: undefined preprocessor identifier '__STDC_VERSION__' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:90:5: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:111:56: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' ./vulnerable/use_after_free.mod.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/container_of.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:11: error: unable to open 'asm/rwonce.h' ./vulnerable/buffer_overflow.mod.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:29:5: warning: undefined preprocessor identifier '__STDC_VERSION__' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:90:5: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:111:56: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' ./vulnerable/buffer_overflow.mod.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/container_of.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:11: error: unable to open 'asm/rwonce.h' ./vulnerable/use_after_free.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:29:5: warning: undefined preprocessor identifier '__STDC_VERSION__' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:90:5: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:111:56: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' ./vulnerable/use_after_free.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/init.h): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:11: error: unable to open 'asm/rwonce.h' ./examples/hello_secure.mod.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:29:5: warning: undefined preprocessor identifier '__STDC_VERSION__' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:90:5: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:111:56: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' ./examples/hello_secure.mod.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/container_of.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:11: error: unable to open 'asm/rwonce.h' ./examples/buffer_overflow_secure.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:29:5: warning: undefined preprocessor identifier '__STDC_VERSION__' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:90:5: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:111:56: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' ./examples/buffer_overflow_secure.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/init.h): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:11: error: unable to open 'asm/rwonce.h' ./examples/hello_secure.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, ...): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:29:5: warning: undefined preprocessor identifier '__STDC_VERSION__' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:90:5: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler_types.h:111:56: warning: undefined preprocessor identifier 'CONFIG_FUNCTION_ALIGNMENT' ./examples/hello_secure.c: note: in included file (through /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/build_bug.h, /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/init.h): /lib/modules/7.0.8-200.fc44.x86_64/build/include/linux/compiler.h:372:11: error: unable to open 'asm/rwonce.h'