After reading through the original Qualys discussion[1] of this new vuln I was definitely left with a feeling that this class of bugs has not yet exhausted its treasure trove of vulns. This article only confirms it.
Very interesting discussion that will likely continue as more people wrap their heads around this tough problem.
So how does it detect stack overflows past that limit?
Edit: Looks like a fix for LLVM being proposed (https://reviews.llvm.org/D9653) is just to probe every page that a stack allocation covers, rather than just the final one. Doesn't sound tough at all.
First read to me as someone who hadn't read the article was "someone found an ancient kernel hole and declared it closed, but in truth it's actually not," which actually seems to be what was intended... it's a fairly common use of "(not)."
Very interesting discussion that will likely continue as more people wrap their heads around this tough problem.
[1] https://blog.qualys.com/securitylabs/2017/06/19/the-stack-cl...