Re: [PATCH] kernel/sys.c: fix prctl_set_auxv to use sizeof instead of user-supplied len
From: David Hildenbrand (Arm)
Date: Tue Jun 02 2026 - 13:28:07 EST
On 6/2/26 16:14, Aiden Bowling wrote:
> The issue is that using the user-supplied 'len' risks a partial write into mm-
>>saved_auxv if they pass something smaller than the actual buffer size, even if
> the buffer is validated. We should always copy the full buffer size after
> validation to maintain consistency and prevent accidental partial data exposure/
> corruption.
Which partial data exposure?
--
Cheers,
David