Eviction Notice: Reviving and Advancing Page Cache Attacks

This repository contains the artifacts for the paper "Eviction Notice: Reviving and Advancing Page Cache Attacks", published at NDSS '26.

Page cache attacks on Linux have been thought to be mititgated or impractically slow since the mitigation of the mincore syscall in 2019. In this paper, we not only revive practical attacks on the page cache, but also provide a systematic classification & understanding of primitives which interact with page cache. This understanding helps us advance page cache attacks, including speeding up previously known mechanisms by six orders of magnitude.

This artifact demonstrates the four primitives which we describe in our paper — flush, reload, evict, and monitor —, two methods to overcome the read-ahead mechanism, syscalls determined to be reload mechanisms, covert channels, and proof-of-concept attacks.