summaryrefslogtreecommitdiff
path: root/sys/dev/microcode
diff options
context:
space:
mode:
authormaxv <maxv@NetBSD.org>2020-06-27 07:00:43 +0000
committermaxv <maxv@NetBSD.org>2020-06-27 07:00:43 +0000
commit8d25bda61d0b391ea44323ab11173af8332534ed (patch)
tree8452b16499f844110059c5d1025f2d57f4161a50 /sys/dev/microcode
parentaaa65c2ffce207aa26fc94ece48561b10566e99c (diff)
Yet another idiotic compat syscall that was developed with literally zero
test made. Simply invoking this syscall with _valid parameters_ triggers a fatal fault, because the kernel tries to write to userland addresses. With specially-crafted parameters it is easy to completely escalate privileges into the kernel. Also the size of the allocation is just obviously wrong, but it looks like the callers are even more wrong, so not gonna fix it for now. Reported-by: syzbot+b05096f3114b2820d81c@syzkaller.appspotmail.com
Diffstat (limited to 'sys/dev/microcode')
0 files changed, 0 insertions, 0 deletions