Re: [PATCH 1/2] x86/setup_data: validate indirect entry sizes before dereferencing them

[Borislav Petkov]

On Sun, Apr 05, 2026 at 09:40:00AM +0800, Pengpeng Hou wrote:
> I think that is worth handling because `setup_data` is still external boot
> input to the kernel. It can come not only from a normal bootloader path, but
> also from kexec-style handoff and virtualized boot flows.

I'm asking you to explain the attack vector in detail. In which of those
examples don't you need physical access to the machine and root?

IOW, what scenario exactly are we protecting here against? 

-- 
Regards/Gruss,
    Boris.

https://people.kernel.org/tglx/notes-about-netiquette