If the stack and heap are non-executable and page tables can't be modified then it's hard to inject code. Whether unikernels actually apply this hardening is another matter.

▲

catlifeonmars 12 hours ago | parent [-]

Isn’t this where ROP gadgets come in?

	▲	wmf 11 hours ago \| parent [-]
		ASLR defeats ROP. Whether unikernels actually use ASLR is another matter.