• bpf
• capabilities
• cybersecurity
• ebpf
• kernel
• linux
• lsm
• seccomp
• toctou
• virtualization
• vulnerability

This thesis analyzes and addresses data visibility vulnerabilities among containers running on the same Linux kernel that utilize eBPF (Extended Berkeley Packet Filter). In multi-container environments, shared kernel access can weaken isolation and security, potentially exposing sensitive data to unauthorized containers. The study explores possible attack vectors that leverage eBPF and proposes prototype solutions to enhance container isolation and security while preserving the ability for users inside the containers to utilize BPF.