I’d like you to read https://lwn.net/Articles/685182/, which describes using the American Fuzzy Lop (AFL)

I’d like you to read https://lwn.net/Articles/685182/, which describes using the American Fuzzy Lop (AFL) fuzzing tool to fuzz filesystem drivers in the Linux kernel. Fuzzing is the process of providing modified inputs to code in an attempt to cause it to behave differently or crash, and then identify whether these could be security issues. As a followup, please read https://lwn.net/Articles/755593/ which gives some more context around the security concerns that exist when applied to filesystems.

Please provide insight on the following:

1) Why does the way the kernel responds to malformed filesystems have an impact on system security, and

2) What possible mitigations could we put in place to reduce the associated risk?