About

I am Muhammad Bilal, a Bachelor's student in Computer Science, a Linux kernel contributor with 26+ CVEs assigned to my merged fixes, and a security researcher interested in the systems where software meets hardware.

FocusLinux kernel security
LanguageC
AlsoRust, reverse engineering
Track record26+ CVEs, dozens of patches
SpeakingLPC 2026 ↗

I like following a problem all the way down: from a visible failure, through the abstraction that hides it, to the code and assumptions that created it. That curiosity is what pulled me into Linux kernel development, security research, debugging, and reverse engineering.

My kernel work so far covers memory safety fixes across staging wifi drivers, the HP BIOS configuration driver, Bluetooth ISO and HIDP, NFC LLCP, netfilter, and the new NPU accelerator drivers. Every bug I fix gets a public research note: the bug mechanics, a working trigger or exploit, the upstream patch, the scoring disputes between the CVE numbering authorities, and every stable backport.

The accelerator audit work also became a conference talk: Security Lessons from Auditing the Linux accel/ethosu Driver was accepted at the Linux Plumbers Conference 2026, in the Kernel Testing and Dependability microconference. It covers the seven upstream fixes from that audit and the recurring patterns behind them, from overflow-safe arithmetic to structured validation of command streams and DMA metadata.

C is the language I return to for its directness. It makes memory, layout, control flow, and system interfaces impossible to ignore, which makes it a natural tool for kernel work. Reverse engineering gives me the same perspective from the other direction: starting with behavior and reconstructing the design, constraints, and intent hidden inside a binary.

Find me on GitHub, email me at meatuni001@gmail.com, follow the patches on kernel.org, or read the research on the front page.

The best systems work is invisible when it succeeds. engineering note, 2024.