{"id":"https://openalex.org/W7170182207","doi":"https://doi.org/10.1007/978-3-032-32537-2_9","title":"Automatic Detection of Reference Counting Bugs in Linux Kernel Drivers","display_name":"Automatic Detection of Reference Counting Bugs in Linux Kernel Drivers","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7170182207","doi":"https://doi.org/10.1007/978-3-032-32537-2_9"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-032-32537-2_9","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-032-32537-2_9","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32537-2_9.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32537-2_9.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030898443","display_name":"Joe Hattori","orcid":"https://orcid.org/0000-0001-5177-8275"},"institutions":[{"id":"https://openalex.org/I153327471","display_name":"Bunkyo University","ror":"https://ror.org/053h75930","country_code":"JP","type":"education","lineage":["https://openalex.org/I153327471"]},{"id":"https://openalex.org/I74801974","display_name":"The University of Tokyo","ror":"https://ror.org/057zh3y96","country_code":"JP","type":"education","lineage":["https://openalex.org/I74801974"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Joe Hattori","raw_affiliation_strings":["The University of Tokyo, Bunkyo City, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0001-5177-8275","affiliations":[{"raw_affiliation_string":"The University of Tokyo, Bunkyo City, Tokyo, Japan","institution_ids":["https://openalex.org/I153327471","https://openalex.org/I74801974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100772473","display_name":"Naoki Kobayashi","orcid":"https://orcid.org/0000-0002-0537-0604"},"institutions":[{"id":"https://openalex.org/I153327471","display_name":"Bunkyo University","ror":"https://ror.org/053h75930","country_code":"JP","type":"education","lineage":["https://openalex.org/I153327471"]},{"id":"https://openalex.org/I74801974","display_name":"The University of Tokyo","ror":"https://ror.org/057zh3y96","country_code":"JP","type":"education","lineage":["https://openalex.org/I74801974"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Naoki Kobayashi","raw_affiliation_strings":["The University of Tokyo, Bunkyo City, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0002-0537-0604","affiliations":[{"raw_affiliation_string":"The University of Tokyo, Bunkyo City, Tokyo, Japan","institution_ids":["https://openalex.org/I153327471","https://openalex.org/I74801974"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049034602","display_name":"Ken Sakayori","orcid":"https://orcid.org/0000-0003-3238-9279"},"institutions":[{"id":"https://openalex.org/I153327471","display_name":"Bunkyo University","ror":"https://ror.org/053h75930","country_code":"JP","type":"education","lineage":["https://openalex.org/I153327471"]},{"id":"https://openalex.org/I74801974","display_name":"The University of Tokyo","ror":"https://ror.org/057zh3y96","country_code":"JP","type":"education","lineage":["https://openalex.org/I74801974"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Ken Sakayori","raw_affiliation_strings":["The University of Tokyo, Bunkyo City, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0003-3238-9279","affiliations":[{"raw_affiliation_string":"The University of Tokyo, Bunkyo City, Tokyo, Japan","institution_ids":["https://openalex.org/I153327471","https://openalex.org/I74801974"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5030898443"],"corresponding_institution_ids":["https://openalex.org/I153327471","https://openalex.org/I74801974"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"191","last_page":"203"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.8809999823570251},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.6901999711990356},{"id":"https://openalex.org/keywords/assertion","display_name":"Assertion","score":0.5289000272750854},{"id":"https://openalex.org/keywords/linux-unified-key-setup","display_name":"Linux Unified Key Setup","score":0.5070000290870667},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.4553999900817871},{"id":"https://openalex.org/keywords/configfs","display_name":"Configfs","score":0.4537999927997589},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.4311000108718872}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8888999819755554},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.8809999823570251},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.7350999712944031},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.6901999711990356},{"id":"https://openalex.org/C40422974","wikidata":"https://www.wikidata.org/wiki/Q741248","display_name":"Assertion","level":2,"score":0.5289000272750854},{"id":"https://openalex.org/C45463861","wikidata":"https://www.wikidata.org/wiki/Q942617","display_name":"Linux Unified Key Setup","level":3,"score":0.5070000290870667},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.4553999900817871},{"id":"https://openalex.org/C94127936","wikidata":"https://www.wikidata.org/wiki/Q5160105","display_name":"Configfs","level":3,"score":0.4537999927997589},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.4311000108718872},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.391400009393692},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.38519999384880066},{"id":"https://openalex.org/C517481932","wikidata":"https://www.wikidata.org/wiki/Q388","display_name":"GNU/Linux","level":3,"score":0.3783000111579895},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.36570000648498535},{"id":"https://openalex.org/C90307666","wikidata":"https://www.wikidata.org/wiki/Q1932562","display_name":"sysfs","level":3,"score":0.3467999994754791},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.33570000529289246},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.32499998807907104},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.28130000829696655},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.26669999957084656}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-032-32537-2_9","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-032-32537-2_9","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32537-2_9.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"}],"best_oa_location":{"id":"doi:10.1007/978-3-032-32537-2_9","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-032-32537-2_9","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-032-32537-2_9.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4396647991","display_name":"Program Verification Techniques for the AI Era","funder_award_id":"20H05703","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7170182207.pdf","grobid_xml":"https://content.openalex.org/works/W7170182207.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W967948971","https://openalex.org/W1498247806","https://openalex.org/W1520219097","https://openalex.org/W1596552075","https://openalex.org/W1599830632","https://openalex.org/W2087588854","https://openalex.org/W2105614525","https://openalex.org/W2293809538","https://openalex.org/W2315953879","https://openalex.org/W2748224507","https://openalex.org/W4230073887","https://openalex.org/W4240621788","https://openalex.org/W4246166885","https://openalex.org/W4405181472"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Reference":[1],"counting":[2,32],"bugs":[3,28],"in":[4,69],"Linux":[5,41,49,71,100],"kernel":[6,50],"drivers":[7,68],"can":[8],"lead":[9],"to":[10,25,34,82,98],"severe":[11],"resource":[12],"mismanagement":[13],"and":[14,51,102],"security":[15],"vulnerabilities.":[16],"We":[17],"introduce":[18],"DrvHorn":[19,55],",":[20],"a":[21,74],"novel":[22],"automated":[23],"tool":[24],"detect":[26],"these":[27,91],"by":[29],"reducing":[30],"reference":[31],"verification":[33],"an":[35],"assertion":[36],"checking":[37],"problem":[38],"leveraging":[39],"the":[40,48,87,99],"driver":[42],"interface.":[43],"Through":[44],"efficient":[45],"modeling":[46],"of":[47,59,79,90,104],"aggressive":[52],"program":[53],"slicing,":[54],"discovered":[56,93],"545":[57],"bugs,":[58,94],"which":[60],"424":[61],"were":[62,106],"previously":[63],"unknown,":[64],"across":[65],"all":[66],"platform":[67],"v6.6":[70],"kernel,":[72,101],"with":[73],"lower":[75],"false":[76],"positive":[77],"rate":[78],"29.9%":[80],"compared":[81],"prior":[83],"studies.":[84],"To":[85],"address":[86],"root":[88],"causes":[89],"newly":[92],"we":[95],"submitted":[96],"patches":[97],"45":[103],"them":[105],"merged.":[107]},"counts_by_year":[],"updated_date":"2026-08-06T08:24:18.245995","created_date":"2026-07-24T00:00:00"}
