Microsoft can integrate the Linux subsystem in the new release of Windows 10

Recently it became known that the Windows 10 Insider Preview Build 14251 system file set contains two drivers with the names LXss.sys and LXCore.sys, which may be directly related to the implementation of the Linux subsystem on Windows 10, to support the latest launch of the respective applications. These file names can be interpreted as Linux Subsystem and Linux Core. Also, these two files are related to Windows 10 Mobile, for which Microsoft was going to include support for Android OS applications, also based on the Linux kernel.



In addition, the well-known Windows internal device guru and one of the co-authors of the well-known Windows Internals book, Alex Ionescu, showed in a twitter a screenshot of one of the functions of the LXCore.sys Windows 10 driver of the same issue in the Windbg debugger, which shows the 64-bit executable header analyzer Linux files, known as ELF64.


Fig. The function of checking the header of an executable 64-bit Linux file called LxElfValidateHeader64 in the LXCore.sys driver. The relation of the driver to the Linux subsystem is also indicated by the name of other driver functions on the stack in windbg. For example, functions with the LxpThreadGroup prefix are related to performing operations with a “thread group”, a special kernel structure in Linux that is not found in Windows NT.