[Bug 295521] kexec subsystem panics on invalid/malformed arguments instead of returning EINVAL
Date: Sat, 30 May 2026 12:51:55 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295521
Bharath Reddy <kbreddy.rpbc@gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |kbreddy.rpbc@gmail.com
--- Comment #1 from Bharath Reddy <kbreddy.rpbc@gmail.com> ---
Raised PR for fixing this bug -
https://github.com/freebsd/freebsd-src/pull/2246
Missing sanity checks in kexec_load(2) allowed malformed arguments to trigger a
kernel panic during syscall execution. Added NULL pointer checks, integer
overflow checks for size parameters (used in segment_fits), and segment overlap
checks for the mem parameter.
--
You are receiving this mail because:
You are the assignee for the bug.