roland.il...@gmx.de (Roland Illig) writes: >That's this line:
>> unit =3D *(const int *)newp; >I don't know at which point newp is validated; maybe that validation is >missing in this case, although I'd expect it to be in the common sysctl >infrastructure code. newp is valid, it's a userland pointer that gets dereferenced by the kernel. Without SMAP that probably even worked on x86.